Edit tour

Windows Analysis Report
https:/wentworth.az1.qualtrics.com/jfe/form/SV_bEnaGtb0Jw7NaWa?Q_DL=QrigjMFTYZVVTqH_bEnaGtb0Jw7NaWa_CGC_gCML4CuBSL0ABp7&Q_CHL=email

Overview

General Information

Sample URL:	https:/wentworth.az1.qualtrics.com/jfe/form/SV_bEnaGtb0Jw7NaWa?Q_DL=QrigjMFTYZVVTqH_bEnaGtb0Jw7NaWa_CGC_gCML4CuBSL0ABp7&Q_CHL=email
Analysis ID:	1543826
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6112 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1736 --field-trial-handle=2012,i,2871850995218753826,7982395101669501192,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https:/wentworth.az1.qualtrics.com/jfe/form/SV_bEnaGtb0Jw7NaWa?Q_DL=QrigjMFTYZVVTqH_bEnaGtb0Jw7NaWa_CGC_gCML4CuBSL0ABp7&Q_CHL=email" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:59216 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:59225 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:59214 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: wentworth.az1.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: eu.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: qualtricsxmhgpw8frtb.qualtrics.com

Source: chromecache_156.2.dr, chromecache_172.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFL
Source: chromecache_156.2.dr, chromecache_172.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLCopyright
Source: chromecache_172.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLPoppinsLight
Source: chromecache_156.2.dr	String found in binary or memory: http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLPoppinsMedium
Source: chromecache_172.2.dr	String found in binary or memory: https://indiantypefoundry.comThis

Source: unknown	Network traffic detected: HTTP traffic on port 59351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59308
Source: unknown	Network traffic detected: HTTP traffic on port 59316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59305
Source: unknown	Network traffic detected: HTTP traffic on port 59339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59307
Source: unknown	Network traffic detected: HTTP traffic on port 59242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59306
Source: unknown	Network traffic detected: HTTP traffic on port 59374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59310
Source: unknown	Network traffic detected: HTTP traffic on port 59380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59317
Source: unknown	Network traffic detected: HTTP traffic on port 59356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59323
Source: unknown	Network traffic detected: HTTP traffic on port 59253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59322
Source: unknown	Network traffic detected: HTTP traffic on port 59362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59324
Source: unknown	Network traffic detected: HTTP traffic on port 59299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59320
Source: unknown	Network traffic detected: HTTP traffic on port 59236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59329
Source: unknown	Network traffic detected: HTTP traffic on port 59225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59334
Source: unknown	Network traffic detected: HTTP traffic on port 59254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59330
Source: unknown	Network traffic detected: HTTP traffic on port 59311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59331
Source: unknown	Network traffic detected: HTTP traffic on port 59367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59216
Source: unknown	Network traffic detected: HTTP traffic on port 59220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59219
Source: unknown	Network traffic detected: HTTP traffic on port 59375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59226
Source: unknown	Network traffic detected: HTTP traffic on port 59276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59342
Source: unknown	Network traffic detected: HTTP traffic on port 59259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59300
Source: unknown	Network traffic detected: HTTP traffic on port 59337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59303
Source: unknown	Network traffic detected: HTTP traffic on port 59360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59302
Source: unknown	Network traffic detected: HTTP traffic on port 59272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 59227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59278
Source: unknown	Network traffic detected: HTTP traffic on port 59313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59277
Source: unknown	Network traffic detected: HTTP traffic on port 59279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59273
Source: unknown	Network traffic detected: HTTP traffic on port 59342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59272
Source: unknown	Network traffic detected: HTTP traffic on port 59233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59289
Source: unknown	Network traffic detected: HTTP traffic on port 59280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59284
Source: unknown	Network traffic detected: HTTP traffic on port 59274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59283
Source: unknown	Network traffic detected: HTTP traffic on port 59307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59280
Source: unknown	Network traffic detected: HTTP traffic on port 59267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59293
Source: unknown	Network traffic detected: HTTP traffic on port 59296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59295
Source: unknown	Network traffic detected: HTTP traffic on port 59273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59294
Source: unknown	Network traffic detected: HTTP traffic on port 59308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59290
Source: unknown	Network traffic detected: HTTP traffic on port 59302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59236
Source: unknown	Network traffic detected: HTTP traffic on port 59281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59231
Source: unknown	Network traffic detected: HTTP traffic on port 59275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59232
Source: unknown	Network traffic detected: HTTP traffic on port 59298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59353
Source: unknown	Network traffic detected: HTTP traffic on port 59306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59350
Source: unknown	Network traffic detected: HTTP traffic on port 59346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59239
Source: unknown	Network traffic detected: HTTP traffic on port 59352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59359
Source: unknown	Network traffic detected: HTTP traffic on port 59373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59367
Source: unknown	Network traffic detected: HTTP traffic on port 59229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59248
Source: unknown	Network traffic detected: HTTP traffic on port 59335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59361
Source: unknown	Network traffic detected: HTTP traffic on port 59257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59360
Source: unknown	Network traffic detected: HTTP traffic on port 59270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59249
Source: unknown	Network traffic detected: HTTP traffic on port 59357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59379
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59253
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59375
Source: unknown	Network traffic detected: HTTP traffic on port 59235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59251
Source: unknown	Network traffic detected: HTTP traffic on port 59258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59371
Source: unknown	Network traffic detected: HTTP traffic on port 59218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59267
Source: unknown	Network traffic detected: HTTP traffic on port 59230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59265
Source: unknown	Network traffic detected: HTTP traffic on port 59297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59381
Source: unknown	Network traffic detected: HTTP traffic on port 59368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59261

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:59216 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:59225 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@21/58@12/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1736 --field-trial-handle=2012,i,2871850995218753826,7982395101669501192,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https:/wentworth.az1.qualtrics.com/jfe/form/SV_bEnaGtb0Jw7NaWa?Q_DL=QrigjMFTYZVVTqH_bEnaGtb0Jw7NaWa_CGC_gCML4CuBSL0ABp7&Q_CHL=email"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1736 --field-trial-handle=2012,i,2871850995218753826,7982395101669501192,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
wentworth.az1.qualtrics.com	unknown	unknown	false	unknown
eu.qualtrics.com	unknown	unknown	false	unknown
qualtricsxmhgpw8frtb.qualtrics.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://wentworth.az1.qualtrics.com/jfe/form/SV_bEnaGtb0Jw7NaWa?Q_DL=QrigjMFTYZVVTqH_bEnaGtb0Jw7NaWa_CGC_gCML4CuBSL0ABp7&Q_CHL=email	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://indiantypefoundry.comThis	chromecache_172.2.dr	false	unknown
http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLPoppinsMedium	chromecache_156.2.dr	false	unknown
http://scripts.sil.org/OFLhttp://scripts.sil.org/OFL	chromecache_156.2.dr, chromecache_172.2.dr	false	unknown
http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLPoppinsLight	chromecache_172.2.dr	false	unknown
http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLCopyright	chromecache_156.2.dr, chromecache_172.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
172.217.18.4	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1543826
Start date and time:	2024-10-28 14:24:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https:/wentworth.az1.qualtrics.com/jfe/form/SV_bEnaGtb0Jw7NaWa?Q_DL=QrigjMFTYZVVTqH_bEnaGtb0Jw7NaWa_CGC_gCML4CuBSL0ABp7&Q_CHL=email
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@21/58@12/3

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 216.58.206.46, 74.125.206.84, 34.104.35.123, 88.221.125.111, 4.175.87.197, 199.232.214.172, 142.250.185.74, 142.250.186.74, 142.250.186.42, 142.250.186.106, 216.58.206.42, 142.250.184.202, 142.250.74.202, 172.217.16.138, 142.250.184.234, 172.217.18.10, 172.217.16.202, 142.250.186.138, 216.58.212.170, 142.250.186.170, 142.250.181.234, 216.58.206.74, 88.221.169.119, 192.229.221.95, 13.95.31.18, 13.85.23.206
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, cloudenhanced.qualtrics.com.edgekey.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, e12398.b.akamaiedge.net, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https:/wentworth.az1.qualtrics.com/jfe/form/SV_bEnaGtb0Jw7NaWa?Q_DL=QrigjMFTYZVVTqH_bEnaGtb0Jw7NaWa_CGC_gCML4CuBSL0ABp7&Q_CHL=email

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3001 x 3222, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	174146
Entropy (8bit):	7.37644577718985
Encrypted:	false
SSDEEP:	3072:ayzHncYB0fMiBiXsoDHAbfu7C3aE5rJhl4j7t6HxMpryCx4CxaS:ayzHcYyBisokfu7q53yftimGmDF
MD5:	2D08F34A9688184E5021240269F0536C
SHA1:	7624AD86EE18E41446CCC2EF771A311E35E41675
SHA-256:	6B5AF4C6C23ADA997C1D25812E21896F7E91EBD6E0ABAD224970D6F76C9538BF
SHA-512:	97C5DD075CA261936B2CE9196BA234407DDE18919C54E76833F6C01FE8FA6A1DAE9E91D6816D4750E8749D4EE918DA6CFA3080270E9B6FB70C27606C4859F808
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/CP/Graphic.php?IM=IM_bsijboruYTSRzkq
Preview:	.PNG........IHDR.............f......pHYs..........+.... .IDATx..._l..}...d.a-...Z.D..pJ...e..T...f...4Q.E;).....F..g...]L$..."DZ{.P....6J.W.....54.<+...2.G..=.q..6NB.......~..l'.....w.......t....J~...1d.^I2s.?~r.......m............\|n .G/.....:.IjK.........\|.\|..d.......,#.;......S....9..yO...LB..3.....\|\|n0..........'r........,..=I>s.....d...cg.......3.......:........=....$....{.x.:.....g.....x.....6#r.....h.=.....p.q..]Y..7.-~&U..............C.......2./........C.8.B....Tq...<......@.......x.........../.............."w.....Kk.=.......4....'..s>......<D................."........t1.;......z....&I}...;..R...!.+s..r...............$.T...Y..]c.:.............."w..........]d.8...~....,.......-O.........,..f.B{_.E...X..}<.s.G........ .;....P.\|.>.f...;...B.>..._......XQ"w....`%.........bk...... r.......1{#I=I_.=.,.3..W.p......`.D.............I6...@.8.*v.Lrx..L.A....@..............Ij%...6..>...............8W#.A.@...k..Tc.....}........U........5R..{n,...n'\|

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42270), with no line terminators
Category:	downloaded
Size (bytes):	42270
Entropy (8bit):	5.32216133757203
Encrypted:	false
SSDEEP:	384:1U75P3LS/3R7DHGCDHA52c2ksQGEqIUdNfDoL9g3Hf3XXKw0eCyWXX1zC8yFXMiS:1UHnIchgro5ZD9ppC8+NiRK4wF61px
MD5:	3F1BC90B4574781C4F3E933ECC5DF8DA
SHA1:	DA214D00E184EE9BF37B7EF7C0A3613A89DF3787
SHA-256:	AE94D26CFDE4187035A3810193330DC6DFA2F77ACF9F44771E304BDE0F9A6BB8
SHA-512:	61E7F6377A4C6EBDB3042F0A7A39AAB348C75E8295BB613E0BAD7F8B42630D9D67F92E077C82282687D63855686C1968609675F1B83C3F0F914F0D5A07AC2CCF
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/c/default~hl~hotspot~matrix.da52cc5849b792cd7525.min.js
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[500],{48855:e=>{e.exports='<span class="LabelWrapper">\n{{? choiceArgs.SA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="SingleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.ChoiceTextPosition}}{{?}}" data-runtime-class-q-checked="runtime.Choices.{{=choiceArgs.choiceId}}.Selected">\n{{?? choiceArgs.MA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="MultipleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.Choice

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11183), with no line terminators
Category:	downloaded
Size (bytes):	11183
Entropy (8bit):	5.245894046368554
Encrypted:	false
SSDEEP:	192:pHKyErCxJKxcVm1sYZvoaJ4X0v0D0y1w07OHc25hw4LQetukw:pqyTVEvvtJSi07OHc25hwwQe8kw
MD5:	A41C2211AC2ACE5C5D1885295D15C199
SHA1:	00B0EEEA0E86E002AF5210D959BAEF7367C476E7
SHA-256:	2D620B124D7EF6B8C7E26A2FCDC1F365C69D5F5861D0C85FCA0C492EBBA376C9
SHA-512:	E16BD71900C6B85694060780EA2FDF98DCEF5968E4BCEC7AEAC705B70F5615ABB669E292E01541DCF90CAA602133FDFA53F0FA7A7A3435BA5E4E1B5A7A969D68
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/c/jsApi.7c610cd2091a43667d53.min.js
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[42],{49348:(e,t,n)=>{var i,o;i=[n(81770)],void 0===(o=function(e){"use strict";var t;function n(e,i,o,r){var u;if(t&&t.IE&&t.Version<9&&("input"==e\|\|"textarea"==e)\|\|"select"==e)u=function(e,t,i){var o="",r=document;t&&t.document&&(r=t.document);for(var u in t){var s=t[u],a="";switch(u){case"className":a="class";break;case"id":a="id";break;case"checked":t[u]&&(a="checked");break;case"htmlFor":a="for";break;default:a=u}o+=a+'="'+s+'" '}var c=n("div");c.innerHTML="<"+e+" "+o+" />";var l=c.firstChild.cloneNode(!0);if(function(e){if(!e)return;var t=document.getElementById("IELeakGarbageBin");t\|\|((t=n("DIV")).id="IELeakGarbageBin",t.style.display="none",document.body.appendChild(t));t.appendChild(e),t.innerHTML=""}(c),i){var d=typeof i;if("object"===d)for(var f=0,h=i.length;f<h;++f){var g,p=i[f];(g="string"==typeof p\|\|"number"==typeof p?r.createTextNode(p):p)&&l.appendChild(g)}else"string"!=d&&"number"!=

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	118812
Entropy (8bit):	5.32818389881823
Encrypted:	false
SSDEEP:	3072:+b4/b4t4Y4vb4s4F4zDP4SzhDBDyPrGVyNNN/9f9lmw4O6o/0M:+YhRDP4SzhDBDyDGVeNN/5mw4O6G
MD5:	753537E017B352916E502805AF2D68F9
SHA1:	4FC2F6F19C50777D9FB5B31DA78C6C37B9AF121A
SHA-256:	79D5B420874984EACC49FC39D4116BD7D840DAF22FC41A20A68CF61C40BECB10
SHA-512:	1C7B5F2919DE7DB060BE756CE797FECD3E6E060B11D03F8AD8C32F0DB8EA761E4E9E0F85A5CDAA488C0B76CB723AB80E549D2EE2A4FEC8DBB9DA44E9533A578E
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/c/matrix.95e6cbf12e0754d59dd4.min.js
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[44],{84410:e=>{e.exports='{{##def.ChoiceRowContent:\n {{? Q.runtime.PositionText === \'above\' }}\n <tr class="FullChoiceRow {{=rowClass}}">\n <td colspan="{{= Q.runtime.AnswerOrder.length }}">\n <table role="presentation" width="100%">\n <tbody>\n <tr>\n <th width="40%" class="AnswerLeft" data-runtime-html="runtime.Choices.{{=choiceId}}.DisplayLeft"></th>\n <td width="20%"></td>\n <th width="40%" class="AnswerRight" data-runtime-html="runtime.Choices.{{=choiceId}}.DisplayRight"></th>\n </tr>\n </tbody>\n </table>\n </td>\n </tr>\n\n <tr class="ChoiceRow {{=rowClass}}">\n {{ var answerCount = Q.runtime.AnswerOrder.length; }}\n {{~ Q.runtime.AnswerOrder :answerId:answerIndex }}\n {{ var lastClass = (answerIndex+1) == answerCount ? \'last\' : \'\'; }}\n <td class="c4 {{=lastClass}}">\n <div class="screen-reader-

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20437), with no line terminators
Category:	downloaded
Size (bytes):	20437
Entropy (8bit):	5.298760363033302
Encrypted:	false
SSDEEP:	384:ndeDnS0D9ShHIDnuW3v9EqVKBp7dAL2mFOxYx7Eq6/3cVuw7HzqcwcK3UPlF:n6SaScnj3l4Bpe7EAaC
MD5:	22812B4CB6F2A4646F5CC34FD298AB90
SHA1:	89CCBC265541F91CD826C1AC0840FF8721E6BAB8
SHA-256:	6261EC668D75C90E14C1D7DD649B97C1303B08BF78379DE6EB5AAA19AF2D5D21
SHA-512:	D96B75FE882A726D1B35F37D0AB4720BCE9D51EEA5FD3502CA70DE5B7BD463ECE2C6615F57A20641D9DADF315847167CAD9B122D7C7D6F5999AB9EFD76B65A48
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/c/default~captcha~cs~db~dd~draw~fileupload~hmap~hl~hotspot~matrix~mc~meta~pgr~ro~sbs~slider~ss~te~timing.c01e032798122340ecd9.min.js
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[606],{89001:t=>{t.exports='<div id="{{= Q.runtime.ID }}Separator" class="Separator" data-runtime-show="runtime.SeparatorDisplayed"></div>\n<div class="QuestionOuter BorderColor{{? Q.runtime.TypeOverride }} {{= Q.runtime.TypeOverride }}{{?? Q.runtime.Type }} {{= Q.runtime.Type }}{{?}} {{? Q.runtime.MobileFirst}}mf{{?}} {{= Q.runtime.ID }}{{? Q.isDisabled()}} AddedQuestionOverlay ResponseSummaryQuestion has-overlay{{?}}" id="{{= Q.runtime.ID }}" questionid="{{= Q.runtime.ID }}" posttag="{{= Q.runtime.ID }}"\n data-runtime-remove-class-hidden="runtime.Displayed">\n\t\t{{var isWarn = Q.runtime.ErrorSeverity === \'warn\'; }}\n\t <div id="QR~{{= Q.runtime.ID }}~VALIDATION" class="ValidationError{{? isWarn }} Warn{{?}}" role="alert" data-runtime-show="runtime.ErrorMsg" data-runtime-html="runtime.ErrorMsg"></div>\n\t <div id="QR~{{= Q.runtime.ID }}~SDPVALIDATION" class="ValidationError" role="alert"

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65424)
Category:	dropped
Size (bytes):	87312
Entropy (8bit):	5.118347929219744
Encrypted:	false
SSDEEP:	1536:BiYV4nbxpovMiEeOIQKLs/E2U76OTuJTuqJ2symkUg1N4mR91DW:VbvkeO52scZj91DW
MD5:	C96922F2734F593CC9DC4135F2F0907C
SHA1:	8669A741F3195154282914C66AEA8BBD1EA305F6
SHA-256:	71C57D558852FCA86691A74B9C13BD78E3508BECF53B324818ECBA2BDBC74B58
SHA-512:	695B86B08365C8661CD3F4AFACF45518364BB7950E6206427C93BCCD0DE803FA67FF0180D37178C33EF9A281B807EDE6081D2C287681E161EFE7A58365C8FDA6
Malicious:	false
Reputation:	low
Preview:	/! For license information please see default~hmap~pgr~ro~te~timing.59626a9c150cd3a4c1df.min.js.LICENSE.txt /.(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[719],{77284:(t,e,i)=>{var s,n;s=[i(73381)],void 0===(n=function(t){"use strict";return t}.apply(e,s))\|\|(t.exports=n)},92648:(t,e,i)=>{var s,n;s=[i(45149)],n=function(t){var e,i,s,n;function o(e,i){var s,n,o,a=e.nodeName.toLowerCase();return"area"===a?(n=(s=e.parentNode).name,!(!e.href\|\|!n\|\|"map"!==s.nodeName.toLowerCase())&&(!!(o=t("img[usemap='#"+n+"']")[0])&&r(o))):(/input\|select\|textarea\|button\|object/.test(a)?!e.disabled:"a"===a&&e.href\|\|i)&&r(e)}function r(e){return t.expr.filters.visible(e)&&!t(e).parents().addBack().filter((function(){return"hidden"===t.css(this,"visibility")})).length}t.ui=t.ui\|\|{},t.extend(t.ui,{version:"1.11.1",keyCode:{BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39,SPACE:32,TAB:9,UP:

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65426)
Category:	downloaded
Size (bytes):	427481
Entropy (8bit):	5.581779928459121
Encrypted:	false
SSDEEP:	3072:qLdW0+2+HfW/mk3JWtVSHoOF2p6Z7NJJT2x9y0RMnFdT/bpfiXHtH5AXcu+voES4:qLk0+2+HPtgn/bpfiXTvHS05
MD5:	3C0F75D2411B40FE379AB5E53E4992ED
SHA1:	E94ECBE96585A3D4C178C14BE834BB5F0D3BBBA9
SHA-256:	99A0FF6AFD1BD344C37E83D34E6BF20D1409BDB73485DB6018DEB7BA46E5658C
SHA-512:	367151FE6DF8E20E49EEB4937DA6672FE32F8EE1EA6FD7201092E72346B5443A171104850DBCF55DD3DE0445D1FD3712BFC77B8F0E320BE778CAEF3AE3A5B011
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/jfe.bb3c0318cca4678796a8.min.js
Preview:	/! For license information please see jfe.bb3c0318cca4678796a8.min.js.LICENSE.txt /.(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[212],{31883:(t,e,n)=>{const i=n(78659),r=n(50828),{isPlainObject:s}=n(45736),o=n(14744),a=n(29466),{parse:u}=n(29025),l=["img","audio","video","picture","svg","object","map","iframe","embed"],c=["script","style"];function h(t,e){t&&Object.keys(t).forEach((function(n){e(t[n],n)}))}function d(t,e){return{}.hasOwnProperty.call(t,e)}function p(t,e){const n=[];return h(t,(function(t){e(t)&&n.push(t)})),n}t.exports=g;const f=/^[^\0\t\n\f\r /<=>]+$/;function g(t,e,n){if(null==t)return"";"number"==typeof t&&(t=t.toString());let m="",v="";function b(t,e){const n=this;this.tag=t,this.attribs=e\|\|{},this.tagPosition=m.length,this.text="",this.mediaChildren=[],this.updateParentNodeText=function(){if(A.length){A[A.length-1].text+=n.text}},this.updateParentNodeMediaChildren=function(){if(A.length&&l.includes(this.tag)){A[A.lengt

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2707), with no line terminators
Category:	downloaded
Size (bytes):	2707
Entropy (8bit):	5.434015062108284
Encrypted:	false
SSDEEP:	48:fdYozFXaeoMeEpQIweEpmNVeEpY2+5R8wa44XCe4y5eAjVeve:7zFXal7FIXZyKgZG
MD5:	267B301356C044B4F1A91E0E1E3CD0AC
SHA1:	135F734A868757E0124DEAB78F70FE3BF66451A2
SHA-256:	6725E78351C515173843310CA7E9B2FECFB372280EFB21DC87AE42E5B56677CE
SHA-512:	216C66F311F83385C32D9C613F55F97C865C17078BEDCAC333238B1E18942ECE16E1FAF3015D503543EFCA6FE2D902BBDBD3CD80C973340B7ED4A84799DEAC9B
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/c/db.d9ab85588dbc255b1a3e.min.js
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[233],{83683:e=>{e.exports='{{? Q.runtime.ShowQuestionText }}\n <label class=\'QuestionText BorderColor\'>{{=Q.runtime.QuestionText}}</label>\n{{?}}\n<div class="QuestionBody">\n {{? Q.runtime.FileURL && Q.runtime.LinkText }}\n <a href="{{! Q.runtime.FileURL}}" target="_blank">{{! Q.runtime.LinkText }}</a>\n {{?}}\n <br>\n</div>'},41764:e=>{e.exports='<div class="QuestionBody">\n{{?Q.runtime.Graphics}}\n<img border="0" src="{{=Q.runtime.Graphics}}" alt="{{=Q.runtime.GraphicsDescription}}"><br>\n{{?}}\n</div>\n'},67575:e=>{e.exports='<div class="QuestionBody">\n{{?Q.runtime.URL}}\n<img border="0" src="{{=Q.runtime.URL}}" alt="{{=Q.runtime.GraphicsDescription}}"><br>\n{{?}}\n</div>\n'},54375:e=>{e.exports='{{? Q.useUpdatedDBElements()}}\n<div class="QuestionText BorderColor">{{=Q.runtime.QuestionText}}</div>\n{{??}}\n<legend>\n <div class="QuestionText BorderColor">{{=Q.runtime.Q

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 910 x 139, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11441
Entropy (8bit):	7.945677030296996
Encrypted:	false
SSDEEP:	192:fVsghbkB9OFNmNJReOKiQ0m4ND3j0MBmfojjFcqDi8cBtgY2nkq59Op:CHOaJE0dND3jVmgjZJ01M9Op
MD5:	E1B864FD6CAFDB0D6D369B9DF619E016
SHA1:	1C03E0B020E657702FA0F7F037018C05BED83579
SHA-256:	2E0AB0B637FBA84D89605424237CD02EC685BCB103D4D05649AD74F94B12F931
SHA-512:	E2D430AE4FCDAFC77834674DBB46D6F6C0CD428DC4D72547F7CA7AA97E4860B9807B5CDC872A6208B1257BA9F6ABBC8B48B2ABDB25E0A7DD687490BCE3F42931
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................pHYs..........+.... .IDATx..I..G..i.........j........p.!.....t......Aos.........v./2.......#........k...cV...p.:.7[,.).NU...<P..t.X~U....,...R..b.X.)."..B.!d/...%...ef.8.p.{....RIVl...SC.l.\|.!..B.!..KH....s2[,...H._.xM..M.......8%9'Jr.!....fU._.. ......../...TQf...MEYNQVl...x%9...Teq\....o..Z.C.!d<...._....L.(+.UY...8.2.B9..QQ.!d.UY\.......Uk}.!..'.....}.h.G........=.9...W.E..IU...\|.p.Z.B.!q.../.{..<......0u37,Jls,.uJrNs.:K..i..<.p`..!...Te........._. \gp.(.)..f.c.3.9..r..$.......B....b............(.......Ed%.>G.L...eBHG..H.!.#..Q_.....8j.....8C....8EY^Q.!d..c$...Q..].{..].$q.2.Ye.`.k.S.....o$...1.B...}......v..7.}.[q{./Z..^I.!d..1.B...}....@...d./+......s...ZF\..B.\|.%.o$D..1.B..h.1~.p.Z..6..#...&.RQg.@...,.(....}...2=B..g..td.q..(...K....@.....2...."....!dz.>......r@:.k./...SU...; .#..QplS(.r..t.)..Jr..[By.s....B..@8.>..G.@V3....<.L..V .t.c....y.#!....}...2=.r@F..qd..wRrloY+..M..+."d.....BH..r@Fa.qL=...h.......FB.!..B.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20437), with no line terminators
Category:	dropped
Size (bytes):	20437
Entropy (8bit):	5.298760363033302
Encrypted:	false
SSDEEP:	384:ndeDnS0D9ShHIDnuW3v9EqVKBp7dAL2mFOxYx7Eq6/3cVuw7HzqcwcK3UPlF:n6SaScnj3l4Bpe7EAaC
MD5:	22812B4CB6F2A4646F5CC34FD298AB90
SHA1:	89CCBC265541F91CD826C1AC0840FF8721E6BAB8
SHA-256:	6261EC668D75C90E14C1D7DD649B97C1303B08BF78379DE6EB5AAA19AF2D5D21
SHA-512:	D96B75FE882A726D1B35F37D0AB4720BCE9D51EEA5FD3502CA70DE5B7BD463ECE2C6615F57A20641D9DADF315847167CAD9B122D7C7D6F5999AB9EFD76B65A48
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[606],{89001:t=>{t.exports='<div id="{{= Q.runtime.ID }}Separator" class="Separator" data-runtime-show="runtime.SeparatorDisplayed"></div>\n<div class="QuestionOuter BorderColor{{? Q.runtime.TypeOverride }} {{= Q.runtime.TypeOverride }}{{?? Q.runtime.Type }} {{= Q.runtime.Type }}{{?}} {{? Q.runtime.MobileFirst}}mf{{?}} {{= Q.runtime.ID }}{{? Q.isDisabled()}} AddedQuestionOverlay ResponseSummaryQuestion has-overlay{{?}}" id="{{= Q.runtime.ID }}" questionid="{{= Q.runtime.ID }}" posttag="{{= Q.runtime.ID }}"\n data-runtime-remove-class-hidden="runtime.Displayed">\n\t\t{{var isWarn = Q.runtime.ErrorSeverity === \'warn\'; }}\n\t <div id="QR~{{= Q.runtime.ID }}~VALIDATION" class="ValidationError{{? isWarn }} Warn{{?}}" role="alert" data-runtime-show="runtime.ErrorMsg" data-runtime-html="runtime.ErrorMsg"></div>\n\t <div id="QR~{{= Q.runtime.ID }}~SDPVALIDATION" class="ValidationError" role="alert"

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 1004, version 1.0
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	6.83404079874172
Encrypted:	false
SSDEEP:	24:0tChrLqdKg+X1t+S9e3YTYeZjlcx/3c1oMZr7MSiZ0LV:0tCRmdD8+SiYMok/3cp0Z0J
MD5:	90CF29AB19DC601F2E5A9F9B3C4898FB
SHA1:	A1A366B0BC23887A1F2645C8F68CB7521706D8E1
SHA-256:	C5550D7F8CC83561C801D3CDC4BB3C1784672CF0413EA79B5B32E890B1558C38
SHA-512:	FE4C726A9176E1D379E48CEBA881FCD7A12CAA38B920604FEE157705F4D7F5FAB7D7F0823D74FA0A3930755A45EA463658FE225B9069FAD99B5566823963A4FE
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/themes/base-css/basestyles-lfe/version-1678899357872-bbfdc9/files/external-link-icon.woff
Preview:	wOFF...............L........................OS/2.......>...VV.c3cmap...4...<...J...wglyf...p........BQhhead...$...+...6...hhea...P.......$.]..hmtx...h............loca...p.........j..maxp...x... ... ...Tname.......;...m.e$post...........)....x.c`da`........t.....B3.f0b.```b`ef....\S......Y@....0#.........x.c```f.`..F..p....\|... .......,........P.@...@9`$.d0......x.5.A..0.E;`.BP.8e.i..5........Cx...!.......g..3..?s.........w.....C#.BsOD<S.......L]r.#..).S..Z.{@.i....4.@g...5......V...[.....2}.....i.....7E..W.OX:D[.K.0.}Q(.@. .}.._[S#....x.c`d``....'...\|e.fa..[qJ..4..X....D...+...x.c`d``a...0.b32..&..F.m.............j.........H........................x.u.KN.0.........`...b.(}.U7.}.....8r.J=......#..p.~...Rby..7.q...;(.K.=+.2.s.'......W...U4.(\.......p.-8NP.3fwx.Vh.E..s.....+.w...!\CS......p..j......ou.l..7.....:...../l..A..{L.....u..J.l.M.X.9.4......v,>..... .v..yN.1.1D.3...O>d.aM.....".X..>...t..........G.<f..4(&~u'\.&+jK..}PL..}.....]...4co..x.c`b......(..R.....

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	118812
Entropy (8bit):	5.32818389881823
Encrypted:	false
SSDEEP:	3072:+b4/b4t4Y4vb4s4F4zDP4SzhDBDyPrGVyNNN/9f9lmw4O6o/0M:+YhRDP4SzhDBDyDGVeNN/5mw4O6G
MD5:	753537E017B352916E502805AF2D68F9
SHA1:	4FC2F6F19C50777D9FB5B31DA78C6C37B9AF121A
SHA-256:	79D5B420874984EACC49FC39D4116BD7D840DAF22FC41A20A68CF61C40BECB10
SHA-512:	1C7B5F2919DE7DB060BE756CE797FECD3E6E060B11D03F8AD8C32F0DB8EA761E4E9E0F85A5CDAA488C0B76CB723AB80E549D2EE2A4FEC8DBB9DA44E9533A578E
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[44],{84410:e=>{e.exports='{{##def.ChoiceRowContent:\n {{? Q.runtime.PositionText === \'above\' }}\n <tr class="FullChoiceRow {{=rowClass}}">\n <td colspan="{{= Q.runtime.AnswerOrder.length }}">\n <table role="presentation" width="100%">\n <tbody>\n <tr>\n <th width="40%" class="AnswerLeft" data-runtime-html="runtime.Choices.{{=choiceId}}.DisplayLeft"></th>\n <td width="20%"></td>\n <th width="40%" class="AnswerRight" data-runtime-html="runtime.Choices.{{=choiceId}}.DisplayRight"></th>\n </tr>\n </tbody>\n </table>\n </td>\n </tr>\n\n <tr class="ChoiceRow {{=rowClass}}">\n {{ var answerCount = Q.runtime.AnswerOrder.length; }}\n {{~ Q.runtime.AnswerOrder :answerId:answerIndex }}\n {{ var lastClass = (answerIndex+1) == answerCount ? \'last\' : \'\'; }}\n <td class="c4 {{=lastClass}}">\n <div class="screen-reader-

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11183), with no line terminators
Category:	dropped
Size (bytes):	11183
Entropy (8bit):	5.245894046368554
Encrypted:	false
SSDEEP:	192:pHKyErCxJKxcVm1sYZvoaJ4X0v0D0y1w07OHc25hw4LQetukw:pqyTVEvvtJSi07OHc25hwwQe8kw
MD5:	A41C2211AC2ACE5C5D1885295D15C199
SHA1:	00B0EEEA0E86E002AF5210D959BAEF7367C476E7
SHA-256:	2D620B124D7EF6B8C7E26A2FCDC1F365C69D5F5861D0C85FCA0C492EBBA376C9
SHA-512:	E16BD71900C6B85694060780EA2FDF98DCEF5968E4BCEC7AEAC705B70F5615ABB669E292E01541DCF90CAA602133FDFA53F0FA7A7A3435BA5E4E1B5A7A969D68
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[42],{49348:(e,t,n)=>{var i,o;i=[n(81770)],void 0===(o=function(e){"use strict";var t;function n(e,i,o,r){var u;if(t&&t.IE&&t.Version<9&&("input"==e\|\|"textarea"==e)\|\|"select"==e)u=function(e,t,i){var o="",r=document;t&&t.document&&(r=t.document);for(var u in t){var s=t[u],a="";switch(u){case"className":a="class";break;case"id":a="id";break;case"checked":t[u]&&(a="checked");break;case"htmlFor":a="for";break;default:a=u}o+=a+'="'+s+'" '}var c=n("div");c.innerHTML="<"+e+" "+o+" />";var l=c.firstChild.cloneNode(!0);if(function(e){if(!e)return;var t=document.getElementById("IELeakGarbageBin");t\|\|((t=n("DIV")).id="IELeakGarbageBin",t.style.display="none",document.body.appendChild(t));t.appendChild(e),t.innerHTML=""}(c),i){var d=typeof i;if("object"===d)for(var f=0,h=i.length;f<h;++f){var g,p=i[f];(g="string"==typeof p\|\|"number"==typeof p?r.createTextNode(p):p)&&l.appendChild(g)}else"string"!=d&&"number"!=

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 15 tables, 1st "DSIG", 26 names, Macintosh, Copyright 2014-2017 Indian Type Foundry (info@indiantypefoundry.com)PoppinsMedium2.201;ITFO;Popp
Category:	downloaded
Size (bytes):	155248
Entropy (8bit):	6.759262213006215
Encrypted:	false
SSDEEP:	3072:xljGcrnKs8yvQH0R6u6R2UJjhfqUr8E7HsS8:PrQHA6u6R5vSU4j
MD5:	C7B158E33A04CFACDC79A1DD1A48DBDD
SHA1:	6575DBF38E9E61BEEC498E2BE61C89D43399DB24
SHA-256:	E47FA644E37CC516F7C22208DF798F28EFDD0AC3E118CBD6323A434186DB68C9
SHA-512:	ED9DF2534CE91C6D8F33755278224A83FB266B91C6B887B289F39BFC0811A76E15DB700FDFD56D2D593B55E03AA86E5C4D5629D78DFB177B547C1A6EC3F4CE1E
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/themes/base-templates/qualtrics/base/version-1711478024504-105870/files/poppinsmedium.ttf
Preview:	...........pDSIG......^h....GDEF......&P...FGPOS.t....&....ZGSUB.T....8...%tOS/2.mx....x...`cmapJ.T....X....gasp......&H....glyf.C.f.......Vhead.BV........6hhea.w.....4...$hmtx..........~loca&..Z...,....maxp._.....X... name7XN%...H....postSTpO.......W......3u]4.._.<...........3..........J...@.....................d.....A...............................U.............d.........g.........X...K...X...^.2.J............................ITFO...........d.L.. ........'..... ...........,...,...I.V.g.V.P...P...A...U...........................r.`.........I.V.r.`...........;...R...........................)...;...K.................................7...D...M...A...........B...~...f.........R.Y.....Y.................6.T.&...................8.a.....&...d.......(.H.0...............D...B...~...................................7...*...".../...........B...~...K...d.....R.Y.....S.....w...........".T.................n...$.a.........d.........L.0.......j.................,....... .Z.5...B...n...<.^.-.A.2.R.0....

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1459 x 368, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29838
Entropy (8bit):	7.837957181259185
Encrypted:	false
SSDEEP:	768:DyMGG+rIntZn0g+Jp2JQmyiWAEUTmriEGYGyX2IK:2MQ7bmJXDXEUaoF
MD5:	1DBF2737F05574A2AA4B0419FE43D147
SHA1:	0C832C70A04E0AA3E114B844F70DE323C30C725D
SHA-256:	58840B3E3F01CC144D6600A2019AE6E4E3190AFD62E39CBBC97EC969A1DB100A
SHA-512:	01392003C3D6765018A9C17B320AE2521C70E510BF745CF2B3BB7CB023B14F97E6E15CE56381C3A0E2229B59B5DF31543C8C5C3CC591762CB03D0B24C4558890
Malicious:	false
Reputation:	low
URL:	https://qualtricsxmhgpw8frtb.qualtrics.com/CP/Graphic.php?IM=IM_dp2LJHzrYzN7uF8
Preview:	.PNG........IHDR.......p......H......pHYs..........+.... .IDATx..._.......9..y.T.z.l... .~....l ...". d.@6..\|.`.......T..{.y/.....Z...S..[.e........O.K.Mq\.._~..-....mI.Gj.....I...Z.'O%......._~......2..OI7.7.......m...`..$.Q.`..b>..._.Ej....e.."...".sJ .(.b>9.T.._.L........x...A.n.T.k.w...n....[.{.....f..=...m....v#R;u.v.x..O.J:..k....X:..+....#...... ......qr-b.U....x..&b[.:......w....=.?U..1...F....:b.U.\|......a_bf......h1.L...[..'...0....J..N ....Q5.....l.siR..(.......[.'.v!......@@...X..~+u....0N....u.c.<}.F.f_U.v.H..p@.T....\|2.9..Z4....X....}S..#...Tin./.q1..I....H..h....0<...X..I...0\.^.{...b[>T....nv..:b[.6..6...=...9......@6.3..(......$l..,.X5./../."..`....cQN.........P......Z.....n.-IQ.j.m..".SGj........Y.'.%}.In!.....,}.....Ej..t....".^..b>9.;.....;E.+.&R;..P.....u...;'...0B.^..:b.JR.U..............0<......~/.....(.j0;f.k)eFR..n....^6006..T.?"......O....../......2#u.......d...u.Z.".SGj..5[........A.(......l[..4b.U..........s.....H...dK..Kz"

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	225307
Entropy (8bit):	5.306096117369691
Encrypted:	false
SSDEEP:	3072:iiz3nYkI5zLXx+T5azrHpSdO8BM0bs5N/jgTKuXEHTnKR2t+gnVzbz:iGYtpXx+TUHJSdOb0MFjx+aKC+Kz
MD5:	AE3B35F7CA39297465B6BEFB038A01CE
SHA1:	7996707D949ABEC182EA1361BA9E641CC18F4011
SHA-256:	CE1268587AA13C2C6FF851ACED6A3140E6BEF2F4BAB8D7CD597F0073619E2843
SHA-512:	93B9F2D060B230477A4EEB35397D6393E6305AF054A9388A3F8AB4A5171EA4BC238D28A2453034B63204AF181E704F2B53797A0639635CC7D010ADE7E2ACC19B
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/jfeLib.de1fb02f4d77cd0779eb.min.js
Preview:	/! For license information please see jfeLib.de1fb02f4d77cd0779eb.min.js.LICENSE.txt /.(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[905],{73206:function(e,t,n){var r,i;e=n.nmd(e);var o=n(47172),s=s\|\|{};s.jQuery=o,function(){var a,u,l,c,f=function(e,t){return function(){return e.apply(t,arguments)}},h=[].slice,p={}.hasOwnProperty,d=function(e,t){for(var n in t)p.call(t,n)&&(e[n]=t[n]);function r(){this.constructor=e}return r.prototype=t.prototype,e.prototype=new r,e.__super__=t.prototype,e},v=[].indexOf\|\|function(e){for(var t=0,n=this.length;t<n;t++)if(t in this&&this[t]===e)return t;return-1};a={options:["prefix","templateDelimiters","rootInterface","preloadData","handler","executeFunctions"],extensions:["binders","formatters","components","adapters"],public:{binders:{},components:{},formatters:{},adapters:{},prefix:"rv",templateDelimiters:["{","}"],rootInterface:".",preloadData:!0,executeFunctions:!1,iterationAlias:function(e){return"%"+e+

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42270), with no line terminators
Category:	dropped
Size (bytes):	42270
Entropy (8bit):	5.32216133757203
Encrypted:	false
SSDEEP:	384:1U75P3LS/3R7DHGCDHA52c2ksQGEqIUdNfDoL9g3Hf3XXKw0eCyWXX1zC8yFXMiS:1UHnIchgro5ZD9ppC8+NiRK4wF61px
MD5:	3F1BC90B4574781C4F3E933ECC5DF8DA
SHA1:	DA214D00E184EE9BF37B7EF7C0A3613A89DF3787
SHA-256:	AE94D26CFDE4187035A3810193330DC6DFA2F77ACF9F44771E304BDE0F9A6BB8
SHA-512:	61E7F6377A4C6EBDB3042F0A7A39AAB348C75E8295BB613E0BAD7F8B42630D9D67F92E077C82282687D63855686C1968609675F1B83C3F0F914F0D5A07AC2CCF
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[500],{48855:e=>{e.exports='<span class="LabelWrapper">\n{{? choiceArgs.SA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="SingleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.ChoiceTextPosition}}{{?}}" data-runtime-class-q-checked="runtime.Choices.{{=choiceArgs.choiceId}}.Selected">\n{{?? choiceArgs.MA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="MultipleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.Choice

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3001 x 3222, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	174146
Entropy (8bit):	7.37644577718985
Encrypted:	false
SSDEEP:	3072:ayzHncYB0fMiBiXsoDHAbfu7C3aE5rJhl4j7t6HxMpryCx4CxaS:ayzHcYyBisokfu7q53yftimGmDF
MD5:	2D08F34A9688184E5021240269F0536C
SHA1:	7624AD86EE18E41446CCC2EF771A311E35E41675
SHA-256:	6B5AF4C6C23ADA997C1D25812E21896F7E91EBD6E0ABAD224970D6F76C9538BF
SHA-512:	97C5DD075CA261936B2CE9196BA234407DDE18919C54E76833F6C01FE8FA6A1DAE9E91D6816D4750E8749D4EE918DA6CFA3080270E9B6FB70C27606C4859F808
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............f......pHYs..........+.... .IDATx..._l..}...d.a-...Z.D..pJ...e..T...f...4Q.E;).....F..g...]L$..."DZ{.P....6J.W.....54.<+...2.G..=.q..6NB.......~..l'.....w.......t....J~...1d.^I2s.?~r.......m............\|n .G/.....:.IjK.........\|.\|..d.......,#.;......S....9..yO...LB..3.....\|\|n0..........'r........,..=I>s.....d...cg.......3.......:........=....$....{.x.:.....g.....x.....6#r.....h.=.....p.q..]Y..7.-~&U..............C.......2./........C.8.B....Tq...<......@.......x.........../.............."w.....Kk.=.......4....'..s>......<D................."........t1.;......z....&I}...;..R...!.+s..r...............$.T...Y..]c.:.............."w..........]d.8...~....,.......-O.........,..f.B{_.E...X..}<.s.G........ .;....P.\|.>.f...;...B.>..._......XQ"w....`%.........bk...... r.......1{#I=I_.=.,.3..W.p......`.D.............I6...@.8.*v.Lrx..L.A....@..............Ij%...6..>...............8W#.A.@...k..Tc.....}........U........5R..{n,...n'\|

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47710), with no line terminators
Category:	dropped
Size (bytes):	47710
Entropy (8bit):	5.232557226001663
Encrypted:	false
SSDEEP:	768:MUHnRVgSQHzn2lu4PbgqooXsoZ4m/WKHA98Pg+1F:72dcHLPX
MD5:	C6619A5DDBBC896B8F7001B652F74F8B
SHA1:	A97AA0BE2F9C6FCE8DAA714C25E6FDEF2368F281
SHA-256:	8E23CB128CF6F4AFC9B994C6926B0FF3FCE1ACFFA2881892038716482748F4CB
SHA-512:	A6ED38978D9E02C375716B80F5592D47EADE59ED047A32AF69E3FFD11EEA3DB1D9599EB1D65B723D2BFD34F3CFF161239E9AED33471701655232E6480CFE7615
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[75],{48855:e=>{e.exports='<span class="LabelWrapper">\n{{? choiceArgs.SA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="SingleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.ChoiceTextPosition}}{{?}}" data-runtime-class-q-checked="runtime.Choices.{{=choiceArgs.choiceId}}.Selected">\n{{?? choiceArgs.MA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="MultipleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.ChoiceT

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65444)
Category:	downloaded
Size (bytes):	91803
Entropy (8bit):	5.278143803415025
Encrypted:	false
SSDEEP:	1536:X2jpSK2KDul+Dk2JUQT3sD6D2MAY1x+AgVhzhwDSPHmRNaisTIsO64pJ1VLjLiFo:p1+DLrx5Pdig
MD5:	24E70922BDE35CCB8D0605F19228D4EE
SHA1:	DF02ECB08A9B90A599E55F36F6F28EB6101CC7AE
SHA-256:	AC10E14F3F3D460DA0929D8E6F6088CFC997E07A8B84E46C99A0FA3330CDDBC1
SHA-512:	EA0DF954FD520EE09F91334A7A9A5657458DF9CA320E819DCB285791D15DAE9E0ABE0E5FB04AD890C44836A005112DC5F2CD5A3FA9F4A65F3FFA0C59CF1CA26A
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/c/prototype.2cc9acb19bf1cf785b7a.min.js
Preview:	/! For license information please see prototype.2cc9acb19bf1cf785b7a.min.js.LICENSE.txt /.(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[507],{48768:module=>{(function(){var Prototype={Version:"1.7.1",Browser:(ua=navigator.userAgent,isOpera="[object Opera]"==Object.prototype.toString.call(window.opera),{IE:!!window.attachEvent&&!isOpera,Opera:isOpera,WebKit:ua.indexOf("AppleWebKit/")>-1,Gecko:ua.indexOf("Gecko")>-1&&-1===ua.indexOf("KHTML"),MobileSafari:/Apple.Mobile/.test(ua)}),BrowserFeatures:{XPath:!!document.evaluate,SelectorsAPI:!!document.querySelector,ElementExtensions:(constructor=window.Element\|\|window.HTMLElement,!(!constructor\|\|!constructor.prototype)),SpecificElementExtensions:function(){if(void 0!==window.HTMLDivElement)return!0;var e=document.createElement("div"),t=document.createElement("form"),n=!1;return e.__proto__&&e.__proto__!==t.__proto__&&(n=!0),e=t=null,n}()},ScriptFragment:"<script[^>]>([\\S\\s]?)</script\\s>",JSON

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	566
Entropy (8bit):	4.955157119986186
Encrypted:	false
SSDEEP:	12:tvG1nAxA03LadwnRyD1QEggbRFgAVrWhzgHQEgtbmrh0TLZ3SUy7:tu1nAxheunRwnBOUngVQhQZ3vs
MD5:	C73613741A974260124FF4800D30CADB
SHA1:	4F139BE9E9C01CA8D26CF24303515192B791A3F3
SHA-256:	299B92560AA9D76C058B1B3E63ADCA9C405E5D671B413BC5B0677995C97BD073
SHA-512:	82084E2B9E09153ABC2051954E041E3319F915E94244303CAE06903C6213FB01E1D4B2F36E98C52DE1EABF86E0960F052933E98006DE3C99B70CF720A4D406BD
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/themes/base-templates/qualtrics/base/version-1711478024504-105870/files/error.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 154.06 153.78"><defs><style>.cls-1{fill:#d13a34;}</style></defs><title>error</title><path class="cls-1" d="M4751.77,1147.42a75.55,75.55,0,0,1-24.43-16.52,80.32,80.32,0,0,1-16.52-24.57,76,76,0,0,1,0-59.68,80.22,80.22,0,0,1,16.52-24.57,76.76,76.76,0,0,1,108.81,0,80.22,80.22,0,0,1,16.52,24.57,76,76,0,0,1,0,59.68,80.32,80.32,0,0,1-16.52,24.57,77.46,77.46,0,0,1-84.39,16.52Zm35.95-41.22h-11.94v11.66h11.94Zm0-71.06h-11.94v59.13h11.94Z" transform="translate(-4704.72 -999.61)"/></svg>

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (559)
Category:	downloaded
Size (bytes):	232396
Entropy (8bit):	5.45696016523831
Encrypted:	false
SSDEEP:	3072:xCD1necoktGzstNdNeAq34jr3u7EZ3IZVOnH2rrWF+PyyMBeEkVGWie2RwUKn9Fd:IDbyZrWFZBeEoGWie2AjxaN2OHQL
MD5:	9069DA639CA1A8935A6700DACDEA498F
SHA1:	B57B0900F7F4225B0830576BA09FBE2D54C51820
SHA-256:	CB13B38DD85445A738AFD926FEFF90985B2A505FE5CBE24F77D420393D580470
SHA-512:	3756C37B9707B90228E12F11F91C6C576245E4CB19D04D2B9911BEE760FABF7EC623093B88FA236EA5B503D7032848576D43418C5D1D8D3EB153D1597C2DDA96
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/themes/templated-skins/qualtrics.base:wentworth.878984558:null/version-1711655843088-c72e09/stylesheet.css
Preview:	#css-trigger{font-family:jfe !important}.#SurveyEngineBody{-webkit-text-size-adjust:100%}..Skin .MC .MAHR li,.Skin .MC .SAHR li{float:left}..Skin .QuestionBody .TextEntryBox.TextEntryLarge{width:600px;height:200px;margin:7px 0}..Skin .QuestionBody .TextEntryBox.TextEntryMedium{width:300px;height:100px;margin:7px 0}..Skin .PGR .DragAndDrop .Items ul li.Selected .rank{display:block}..Skin .PGR .DragAndDrop .NotSelected .rank{display:none}..Skin .PGR .DragAndDrop .Items ul li.Selected:hover{border:1px solid #ccc}..Skin .PGR .DragAndDrop .NotSelected:hover{border:none;padding-left:0;padding-right:0}..Skin .PGR .DragAndDrop .NotSelected .rank{display:none}..Skin .PGR .DragAndDrop .Items ul li.Selected .rank{display:inline-block}..Skin .QuestionOverlay{position:absolute;top:0;bottom:0;left:0;right:0;z-index:10000;background-color:#fff;opacity:0;filter:alpha(opacity=0)}..Skin .ResponseSummary~.QuestionOuter.Matrix .DL td.last{width:50%}..OrgHierarchy{padding:0 20px 20px 20px}..OrgHierarchy .O

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 910 x 139, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11441
Entropy (8bit):	7.945677030296996
Encrypted:	false
SSDEEP:	192:fVsghbkB9OFNmNJReOKiQ0m4ND3j0MBmfojjFcqDi8cBtgY2nkq59Op:CHOaJE0dND3jVmgjZJ01M9Op
MD5:	E1B864FD6CAFDB0D6D369B9DF619E016
SHA1:	1C03E0B020E657702FA0F7F037018C05BED83579
SHA-256:	2E0AB0B637FBA84D89605424237CD02EC685BCB103D4D05649AD74F94B12F931
SHA-512:	E2D430AE4FCDAFC77834674DBB46D6F6C0CD428DC4D72547F7CA7AA97E4860B9807B5CDC872A6208B1257BA9F6ABBC8B48B2ABDB25E0A7DD687490BCE3F42931
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/CP/Graphic.php?IM=IM_2r6kh0Lzwap4XMq
Preview:	.PNG........IHDR....................pHYs..........+.... .IDATx..I..G..i.........j........p.!.....t......Aos.........v./2.......#........k...cV...p.:.7[,.).NU...<P..t.X~U....,...R..b.X.)."..B.!d/...%...ef.8.p.{....RIVl...SC.l.\|.!..B.!..KH....s2[,...H._.xM..M.......8%9'Jr.!....fU._.. ......../...TQf...MEYNQVl...x%9...Teq\....o..Z.C.!d<...._....L.(+.UY...8.2.B9..QQ.!d.UY\.......Uk}.!..'.....}.h.G........=.9...W.E..IU...\|.p.Z.B.!q.../.{..<......0u37,Jls,.uJrNs.:K..i..<.p`..!...Te........._. \gp.(.)..f.c.3.9..r..$.......B....b............(.......Ed%.>G.L...eBHG..H.!.#..Q_.....8j.....8C....8EY^Q.!d..c$...Q..].{..].$q.2.Ye.`.k.S.....o$...1.B...}......v..7.}.[q{./Z..^I.!d..1.B...}....@...d./+......s...ZF\..B.\|.%.o$D..1.B..h.1~.p.Z..6..#...&.RQg.@...,.(....}...2=B..g..td.q..(...K....@.....2...."....!dz.>......r@:.k./...SU...; .#..QplS(.r..t.)..Jr..[By.s....B..@8.>..G.@V3....<.L..V .t.c....y.#!....}...2=.r@F..qd..wRrloY+..M..+."d.....BH..r@Fa.qL=...h.......FB.!..B.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	225307
Entropy (8bit):	5.306096117369691
Encrypted:	false
SSDEEP:	3072:iiz3nYkI5zLXx+T5azrHpSdO8BM0bs5N/jgTKuXEHTnKR2t+gnVzbz:iGYtpXx+TUHJSdOb0MFjx+aKC+Kz
MD5:	AE3B35F7CA39297465B6BEFB038A01CE
SHA1:	7996707D949ABEC182EA1361BA9E641CC18F4011
SHA-256:	CE1268587AA13C2C6FF851ACED6A3140E6BEF2F4BAB8D7CD597F0073619E2843
SHA-512:	93B9F2D060B230477A4EEB35397D6393E6305AF054A9388A3F8AB4A5171EA4BC238D28A2453034B63204AF181E704F2B53797A0639635CC7D010ADE7E2ACC19B
Malicious:	false
Reputation:	low
Preview:	/! For license information please see jfeLib.de1fb02f4d77cd0779eb.min.js.LICENSE.txt /.(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[905],{73206:function(e,t,n){var r,i;e=n.nmd(e);var o=n(47172),s=s\|\|{};s.jQuery=o,function(){var a,u,l,c,f=function(e,t){return function(){return e.apply(t,arguments)}},h=[].slice,p={}.hasOwnProperty,d=function(e,t){for(var n in t)p.call(t,n)&&(e[n]=t[n]);function r(){this.constructor=e}return r.prototype=t.prototype,e.prototype=new r,e.__super__=t.prototype,e},v=[].indexOf\|\|function(e){for(var t=0,n=this.length;t<n;t++)if(t in this&&this[t]===e)return t;return-1};a={options:["prefix","templateDelimiters","rootInterface","preloadData","handler","executeFunctions"],extensions:["binders","formatters","components","adapters"],public:{binders:{},components:{},formatters:{},adapters:{},prefix:"rv",templateDelimiters:["{","}"],rootInterface:".",preloadData:!0,executeFunctions:!1,iterationAlias:function(e){return"%"+e+

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65426)
Category:	dropped
Size (bytes):	427481
Entropy (8bit):	5.581779928459121
Encrypted:	false
SSDEEP:	3072:qLdW0+2+HfW/mk3JWtVSHoOF2p6Z7NJJT2x9y0RMnFdT/bpfiXHtH5AXcu+voES4:qLk0+2+HPtgn/bpfiXTvHS05
MD5:	3C0F75D2411B40FE379AB5E53E4992ED
SHA1:	E94ECBE96585A3D4C178C14BE834BB5F0D3BBBA9
SHA-256:	99A0FF6AFD1BD344C37E83D34E6BF20D1409BDB73485DB6018DEB7BA46E5658C
SHA-512:	367151FE6DF8E20E49EEB4937DA6672FE32F8EE1EA6FD7201092E72346B5443A171104850DBCF55DD3DE0445D1FD3712BFC77B8F0E320BE778CAEF3AE3A5B011
Malicious:	false
Reputation:	low
Preview:	/! For license information please see jfe.bb3c0318cca4678796a8.min.js.LICENSE.txt /.(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[212],{31883:(t,e,n)=>{const i=n(78659),r=n(50828),{isPlainObject:s}=n(45736),o=n(14744),a=n(29466),{parse:u}=n(29025),l=["img","audio","video","picture","svg","object","map","iframe","embed"],c=["script","style"];function h(t,e){t&&Object.keys(t).forEach((function(n){e(t[n],n)}))}function d(t,e){return{}.hasOwnProperty.call(t,e)}function p(t,e){const n=[];return h(t,(function(t){e(t)&&n.push(t)})),n}t.exports=g;const f=/^[^\0\t\n\f\r /<=>]+$/;function g(t,e,n){if(null==t)return"";"number"==typeof t&&(t=t.toString());let m="",v="";function b(t,e){const n=this;this.tag=t,this.attribs=e\|\|{},this.tagPosition=m.length,this.text="",this.mediaChildren=[],this.updateParentNodeText=function(){if(A.length){A[A.length-1].text+=n.text}},this.updateParentNodeMediaChildren=function(){if(A.length&&l.includes(this.tag)){A[A.lengt

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2707), with no line terminators
Category:	dropped
Size (bytes):	2707
Entropy (8bit):	5.434015062108284
Encrypted:	false
SSDEEP:	48:fdYozFXaeoMeEpQIweEpmNVeEpY2+5R8wa44XCe4y5eAjVeve:7zFXal7FIXZyKgZG
MD5:	267B301356C044B4F1A91E0E1E3CD0AC
SHA1:	135F734A868757E0124DEAB78F70FE3BF66451A2
SHA-256:	6725E78351C515173843310CA7E9B2FECFB372280EFB21DC87AE42E5B56677CE
SHA-512:	216C66F311F83385C32D9C613F55F97C865C17078BEDCAC333238B1E18942ECE16E1FAF3015D503543EFCA6FE2D902BBDBD3CD80C973340B7ED4A84799DEAC9B
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[233],{83683:e=>{e.exports='{{? Q.runtime.ShowQuestionText }}\n <label class=\'QuestionText BorderColor\'>{{=Q.runtime.QuestionText}}</label>\n{{?}}\n<div class="QuestionBody">\n {{? Q.runtime.FileURL && Q.runtime.LinkText }}\n <a href="{{! Q.runtime.FileURL}}" target="_blank">{{! Q.runtime.LinkText }}</a>\n {{?}}\n <br>\n</div>'},41764:e=>{e.exports='<div class="QuestionBody">\n{{?Q.runtime.Graphics}}\n<img border="0" src="{{=Q.runtime.Graphics}}" alt="{{=Q.runtime.GraphicsDescription}}"><br>\n{{?}}\n</div>\n'},67575:e=>{e.exports='<div class="QuestionBody">\n{{?Q.runtime.URL}}\n<img border="0" src="{{=Q.runtime.URL}}" alt="{{=Q.runtime.GraphicsDescription}}"><br>\n{{?}}\n</div>\n'},54375:e=>{e.exports='{{? Q.useUpdatedDBElements()}}\n<div class="QuestionText BorderColor">{{=Q.runtime.QuestionText}}</div>\n{{??}}\n<legend>\n <div class="QuestionText BorderColor">{{=Q.runtime.Q

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65444)
Category:	dropped
Size (bytes):	91803
Entropy (8bit):	5.278143803415025
Encrypted:	false
SSDEEP:	1536:X2jpSK2KDul+Dk2JUQT3sD6D2MAY1x+AgVhzhwDSPHmRNaisTIsO64pJ1VLjLiFo:p1+DLrx5Pdig
MD5:	24E70922BDE35CCB8D0605F19228D4EE
SHA1:	DF02ECB08A9B90A599E55F36F6F28EB6101CC7AE
SHA-256:	AC10E14F3F3D460DA0929D8E6F6088CFC997E07A8B84E46C99A0FA3330CDDBC1
SHA-512:	EA0DF954FD520EE09F91334A7A9A5657458DF9CA320E819DCB285791D15DAE9E0ABE0E5FB04AD890C44836A005112DC5F2CD5A3FA9F4A65F3FFA0C59CF1CA26A
Malicious:	false
Reputation:	low
Preview:	/! For license information please see prototype.2cc9acb19bf1cf785b7a.min.js.LICENSE.txt /.(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[507],{48768:module=>{(function(){var Prototype={Version:"1.7.1",Browser:(ua=navigator.userAgent,isOpera="[object Opera]"==Object.prototype.toString.call(window.opera),{IE:!!window.attachEvent&&!isOpera,Opera:isOpera,WebKit:ua.indexOf("AppleWebKit/")>-1,Gecko:ua.indexOf("Gecko")>-1&&-1===ua.indexOf("KHTML"),MobileSafari:/Apple.Mobile/.test(ua)}),BrowserFeatures:{XPath:!!document.evaluate,SelectorsAPI:!!document.querySelector,ElementExtensions:(constructor=window.Element\|\|window.HTMLElement,!(!constructor\|\|!constructor.prototype)),SpecificElementExtensions:function(){if(void 0!==window.HTMLDivElement)return!0;var e=document.createElement("div"),t=document.createElement("form"),n=!1;return e.__proto__&&e.__proto__!==t.__proto__&&(n=!0),e=t=null,n}()},ScriptFragment:"<script[^>]>([\\S\\s]?)</script\\s>",JSON

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24499), with no line terminators
Category:	dropped
Size (bytes):	24499
Entropy (8bit):	5.3748717358526354
Encrypted:	false
SSDEEP:	384:dU75P3LS/3R7DHGCDHA5enyivePGFfOVIsnMPS+/xEd7m4Ra5jCtjmW5glFfR:dUHnjiFfXsgad7m4Ra5jCtjmW5glF5
MD5:	694AAA8D4A8882242F6A6A54CE212B28
SHA1:	4B4A9EFDBA0E3BD47695163A26C8C7F1960C7B3A
SHA-256:	06ACE17721DAD81AAF092760B0739736C50B74736BDF655D32B603506CFD208C
SHA-512:	0008E67ED052AB02DE6B4DC9DEAC92CAD6612762543A03FB8CFE7BE18ABA155C3A689DD231D47BADD8E031F1969C329A1509F20C3B59B3495A67DB154F678E75
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[218],{48855:e=>{e.exports='<span class="LabelWrapper">\n{{? choiceArgs.SA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="SingleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.ChoiceTextPosition}}{{?}}" data-runtime-class-q-checked="runtime.Choices.{{=choiceArgs.choiceId}}.Selected">\n{{?? choiceArgs.MA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="MultipleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.Choice

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36501), with no line terminators
Category:	dropped
Size (bytes):	36501
Entropy (8bit):	5.562368926575793
Encrypted:	false
SSDEEP:	768:oUHnsR0KSQ/y49PfEVauDd5ZBjDRyNmDZ:eR0EyeHENDNBjD2mV
MD5:	8AF02AC83C0B39B87162A97ACFF7726C
SHA1:	AA4322F4C5DB648A781AB8AA6CFDD8737828B49A
SHA-256:	29CC58992275B6BCE773BE6C160A500237DB55E458C77B728002513E225B1216
SHA-512:	3150FB682E5E93ABCCCF88B970928A21D1C761027444D760C483115A261D2CFB99A1E9D8AAD6267513458A7FFD1E9AD7B966DD852A272CB5D982098C61252971
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[198],{48855:e=>{e.exports='<span class="LabelWrapper">\n{{? choiceArgs.SA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="SingleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.ChoiceTextPosition}}{{?}}" data-runtime-class-q-checked="runtime.Choices.{{=choiceArgs.choiceId}}.Selected">\n{{?? choiceArgs.MA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="MultipleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.Choice

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 15 tables, 1st "DSIG", 26 names, Macintosh, Copyright 2014-2017 Indian Type Foundry (info@indiantypefoundry.com)PoppinsLight2.201;ITFO;Poppi
Category:	downloaded
Size (bytes):	156104
Entropy (8bit):	6.764066079393555
Encrypted:	false
SSDEEP:	3072:CtzkA5pyElodyf4hxv93hkcydjiGL7Lxd2revBR+aOKk+XtfKo8UYszE:C1yVyf4hxV3h+bLb2dR+tSIQ
MD5:	32B18121A85A090C974BAA27EAA801FB
SHA1:	107454FB84957D1EA4BD4C0335377DF253EB2258
SHA-256:	BD289695AF1C1055DBB65D8043E59F658B4F66BE770410A1CC4A1C1714008618
SHA-512:	E9B40B9D7B7E4528D72800FB4D8652B04903DA1467F64B32F0D3AA5D80EA7ECB7743CAF45A9F1AE1FD09978F1EDA2EC06E6F96AD4291AEC05AA65823CB0886C8
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/themes/base-templates/qualtrics/base/version-1711478024504-105870/files/poppinslight.ttf
Preview:	...........pDSIG......a.....GDEF......)....FGPOS....$...(GSUB...X..<L..%rOS/2.v....x...`cmapJ.T....X....gasp......).....glyf)...........head..V........6hhea.......4...$hmtx..........~loca.(X8...,....maxp._.....X... name..........postSTpO...\|...W......3u.=.._.<...........-..........H.G......................d.....k.G.............................W.............d.........X.,.......X...K...X...^.2.G............................ITFO...........d.L.. ........"..... ...........,...,...6.V.?.V.V...V...I...Y...........................?.V.\|...g...6.V.?.V...........S...q.......................!...3...)...<.................................1...3...3...............J...y...P.........e.P.....i...................a.....................!.r.........`.........O.................3...J...y...................................1.../...0...*...........J...y...O...e.....e.P....._.....{.............a.....................2.r.........`.........O.@.............../.........K.........X.5...]...V.x.H.'.;.E.=.I.5.o.,

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65424)
Category:	downloaded
Size (bytes):	87312
Entropy (8bit):	5.118347929219744
Encrypted:	false
SSDEEP:	1536:BiYV4nbxpovMiEeOIQKLs/E2U76OTuJTuqJ2symkUg1N4mR91DW:VbvkeO52scZj91DW
MD5:	C96922F2734F593CC9DC4135F2F0907C
SHA1:	8669A741F3195154282914C66AEA8BBD1EA305F6
SHA-256:	71C57D558852FCA86691A74B9C13BD78E3508BECF53B324818ECBA2BDBC74B58
SHA-512:	695B86B08365C8661CD3F4AFACF45518364BB7950E6206427C93BCCD0DE803FA67FF0180D37178C33EF9A281B807EDE6081D2C287681E161EFE7A58365C8FDA6
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/c/default~hmap~pgr~ro~te~timing.59626a9c150cd3a4c1df.min.js
Preview:	/! For license information please see default~hmap~pgr~ro~te~timing.59626a9c150cd3a4c1df.min.js.LICENSE.txt /.(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[719],{77284:(t,e,i)=>{var s,n;s=[i(73381)],void 0===(n=function(t){"use strict";return t}.apply(e,s))\|\|(t.exports=n)},92648:(t,e,i)=>{var s,n;s=[i(45149)],n=function(t){var e,i,s,n;function o(e,i){var s,n,o,a=e.nodeName.toLowerCase();return"area"===a?(n=(s=e.parentNode).name,!(!e.href\|\|!n\|\|"map"!==s.nodeName.toLowerCase())&&(!!(o=t("img[usemap='#"+n+"']")[0])&&r(o))):(/input\|select\|textarea\|button\|object/.test(a)?!e.disabled:"a"===a&&e.href\|\|i)&&r(e)}function r(e){return t.expr.filters.visible(e)&&!t(e).parents().addBack().filter((function(){return"hidden"===t.css(this,"visibility")})).length}t.ui=t.ui\|\|{},t.extend(t.ui,{version:"1.11.1",keyCode:{BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39,SPACE:32,TAB:9,UP:

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1459 x 368, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29838
Entropy (8bit):	7.837957181259185
Encrypted:	false
SSDEEP:	768:DyMGG+rIntZn0g+Jp2JQmyiWAEUTmriEGYGyX2IK:2MQ7bmJXDXEUaoF
MD5:	1DBF2737F05574A2AA4B0419FE43D147
SHA1:	0C832C70A04E0AA3E114B844F70DE323C30C725D
SHA-256:	58840B3E3F01CC144D6600A2019AE6E4E3190AFD62E39CBBC97EC969A1DB100A
SHA-512:	01392003C3D6765018A9C17B320AE2521C70E510BF745CF2B3BB7CB023B14F97E6E15CE56381C3A0E2229B59B5DF31543C8C5C3CC591762CB03D0B24C4558890
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......p......H......pHYs..........+.... .IDATx..._.......9..y.T.z.l... .~....l ...". d.@6..\|.`.......T..{.y/.....Z...S..[.e........O.K.Mq\.._~..-....mI.Gj.....I...Z.'O%......._~......2..OI7.7.......m...`..$.Q.`..b>..._.Ej....e.."...".sJ .(.b>9.T.._.L........x...A.n.T.k.w...n....[.{.....f..=...m....v#R;u.v.x..O.J:..k....X:..+....#...... ......qr-b.U....x..&b[.:......w....=.?U..1...F....:b.U.\|......a_bf......h1.L...[..'...0....J..N ....Q5.....l.siR..(.......[.'.v!......@@...X..~+u....0N....u.c.<}.F.f_U.v.H..p@.T....\|2.9..Z4....X....}S..#...Tin./.q1..I....H..h....0<...X..I...0\.^.{...b[>T....nv..:b[.6..6...=...9......@6.3..(......$l..,.X5./../."..`....cQN.........P......Z.....n.-IQ.j.m..".SGj........Y.'.%}.In!.....,}.....Ej..t....".^..b>9.;.....;E.+.&R;..P.....u...;'...0B.^..:b.JR.U..............0<......~/.....(.j0;f.k)eFR..n....^6006..T.?"......O....../......2#u.......d...u.Z.".SGj..5[........A.(......l[..4b.U..........s.....H...dK..Kz"

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36501), with no line terminators
Category:	downloaded
Size (bytes):	36501
Entropy (8bit):	5.562368926575793
Encrypted:	false
SSDEEP:	768:oUHnsR0KSQ/y49PfEVauDd5ZBjDRyNmDZ:eR0EyeHENDNBjD2mV
MD5:	8AF02AC83C0B39B87162A97ACFF7726C
SHA1:	AA4322F4C5DB648A781AB8AA6CFDD8737828B49A
SHA-256:	29CC58992275B6BCE773BE6C160A500237DB55E458C77B728002513E225B1216
SHA-512:	3150FB682E5E93ABCCCF88B970928A21D1C761027444D760C483115A261D2CFB99A1E9D8AAD6267513458A7FFD1E9AD7B966DD852A272CB5D982098C61252971
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/c/te.cdbdcaa62ce306aa97f2.min.js
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[198],{48855:e=>{e.exports='<span class="LabelWrapper">\n{{? choiceArgs.SA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="SingleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.ChoiceTextPosition}}{{?}}" data-runtime-class-q-checked="runtime.Choices.{{=choiceArgs.choiceId}}.Selected">\n{{?? choiceArgs.MA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="MultipleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.Choice

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	148
Entropy (8bit):	4.737318091877308
Encrypted:	false
SSDEEP:	3:wXBzP2F9y40iCkuSdAfuTxRiun3OChnnVGnuuuQV9nOhhSaSUrn0DXCnY6hRn:wXBzPIy40inPdxp+CbGuuffOhhS+0rCV
MD5:	E1E6B367E7C329F86A97AD847ECECA32
SHA1:	D4476E07131C3C3764D7899100FB8076F41F7A01
SHA-256:	17D5BBC2A3945838A37FE07FC3344B8EF4CE21424A6E2A535995D634BE9392D1
SHA-512:	D09DFE496A6C00B2819CECB9A641DF83356A913A7D39D2A2EEA7FACA9F5CCFC26DDEBA52D9ADF8F4E29412C4EF7FA4ACBE4DFEF7E35EFA97A0550E60BC05DB9D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQkJsoR7X1tzGhIFDbtydGISBQ0yYqX2EgUNjvpYkBIFDRHQvKYSBQ2OX6T4EgUN0rJDMxIFDW-2vNUSBQ1KKuMmEgUNoYcgAxIFDb_DWXMSBQ0fnRydEgUN4M5kGA==?alt=proto
Preview:	CmwKBw27cnRiGgAKBw0yYqX2GgAKBw2O+liQGgAKBw0R0LymGgAKBw2OX6T4GgAKBw3SskMzGgAKBw1vtrzVGgAKBw1KKuMmGgAKBw2hhyADGgAKBw2/w1lzGgAKBw0fnRydGgAKBw3gzmQYGgA=

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24499), with no line terminators
Category:	downloaded
Size (bytes):	24499
Entropy (8bit):	5.3748717358526354
Encrypted:	false
SSDEEP:	384:dU75P3LS/3R7DHGCDHA5enyivePGFfOVIsnMPS+/xEd7m4Ra5jCtjmW5glFfR:dUHnjiFfXsgad7m4Ra5jCtjmW5glF5
MD5:	694AAA8D4A8882242F6A6A54CE212B28
SHA1:	4B4A9EFDBA0E3BD47695163A26C8C7F1960C7B3A
SHA-256:	06ACE17721DAD81AAF092760B0739736C50B74736BDF655D32B603506CFD208C
SHA-512:	0008E67ED052AB02DE6B4DC9DEAC92CAD6612762543A03FB8CFE7BE18ABA155C3A689DD231D47BADD8E031F1969C329A1509F20C3B59B3495A67DB154F678E75
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/c/ro.7188ff08492fe656d2d9.min.js
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[218],{48855:e=>{e.exports='<span class="LabelWrapper">\n{{? choiceArgs.SA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="SingleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.ChoiceTextPosition}}{{?}}" data-runtime-class-q-checked="runtime.Choices.{{=choiceArgs.choiceId}}.Selected">\n{{?? choiceArgs.MA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="MultipleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.Choice

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	566
Entropy (8bit):	4.955157119986186
Encrypted:	false
SSDEEP:	12:tvG1nAxA03LadwnRyD1QEggbRFgAVrWhzgHQEgtbmrh0TLZ3SUy7:tu1nAxheunRwnBOUngVQhQZ3vs
MD5:	C73613741A974260124FF4800D30CADB
SHA1:	4F139BE9E9C01CA8D26CF24303515192B791A3F3
SHA-256:	299B92560AA9D76C058B1B3E63ADCA9C405E5D671B413BC5B0677995C97BD073
SHA-512:	82084E2B9E09153ABC2051954E041E3319F915E94244303CAE06903C6213FB01E1D4B2F36E98C52DE1EABF86E0960F052933E98006DE3C99B70CF720A4D406BD
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 154.06 153.78"><defs><style>.cls-1{fill:#d13a34;}</style></defs><title>error</title><path class="cls-1" d="M4751.77,1147.42a75.55,75.55,0,0,1-24.43-16.52,80.32,80.32,0,0,1-16.52-24.57,76,76,0,0,1,0-59.68,80.22,80.22,0,0,1,16.52-24.57,76.76,76.76,0,0,1,108.81,0,80.22,80.22,0,0,1,16.52,24.57,76,76,0,0,1,0,59.68,80.32,80.32,0,0,1-16.52,24.57,77.46,77.46,0,0,1-84.39,16.52Zm35.95-41.22h-11.94v11.66h11.94Zm0-71.06h-11.94v59.13h11.94Z" transform="translate(-4704.72 -999.61)"/></svg>

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47710), with no line terminators
Category:	downloaded
Size (bytes):	47710
Entropy (8bit):	5.232557226001663
Encrypted:	false
SSDEEP:	768:MUHnRVgSQHzn2lu4PbgqooXsoZ4m/WKHA98Pg+1F:72dcHLPX
MD5:	C6619A5DDBBC896B8F7001B652F74F8B
SHA1:	A97AA0BE2F9C6FCE8DAA714C25E6FDEF2368F281
SHA-256:	8E23CB128CF6F4AFC9B994C6926B0FF3FCE1ACFFA2881892038716482748F4CB
SHA-512:	A6ED38978D9E02C375716B80F5592D47EADE59ED047A32AF69E3FFD11EEA3DB1D9599EB1D65B723D2BFD34F3CFF161239E9AED33471701655232E6480CFE7615
Malicious:	false
Reputation:	low
URL:	https://wentworth.az1.qualtrics.com/jfe/static/dist/c/mc.1ed755546e2e593eda54.min.js
Preview:	(self.webpackChunkjavascriptformengine=self.webpackChunkjavascriptformengine\|\|[]).push([[75],{48855:e=>{e.exports='<span class="LabelWrapper">\n{{? choiceArgs.SA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="SingleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.ChoiceTextPosition}}{{?}}" data-runtime-class-q-checked="runtime.Choices.{{=choiceArgs.choiceId}}.Selected">\n{{?? choiceArgs.MA }}\n <label for="QR~{{? Q.runtime.ID }}{{=Q.runtime.ID}}{{?}}~{{=choiceArgs.choiceId}}" id="{{=Q.runtime.ID}}-{{=choiceArgs.choiceId}}-label" class="MultipleAnswer {{? choiceArgs.Q.runtime.LabelPosition}}LabelPosition{{=choiceArgs.Q.runtime.LabelPosition}}{{?}} {{? choiceArgs.Q.runtime.ChoiceTextPosition}}ChoiceTextPosition{{=choiceArgs.Q.runtime.ChoiceT

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 14:25:36.263231039 CET	49675	443	192.168.2.4	173.222.162.32
Oct 28, 2024 14:25:42.858474016 CET	49739	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:25:42.858517885 CET	443	49739	172.217.18.4	192.168.2.4
Oct 28, 2024 14:25:42.859203100 CET	49739	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:25:42.859491110 CET	49739	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:25:42.859504938 CET	443	49739	172.217.18.4	192.168.2.4
Oct 28, 2024 14:25:43.734927893 CET	443	49739	172.217.18.4	192.168.2.4
Oct 28, 2024 14:25:43.735501051 CET	49739	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:25:43.735512018 CET	443	49739	172.217.18.4	192.168.2.4
Oct 28, 2024 14:25:43.736920118 CET	443	49739	172.217.18.4	192.168.2.4
Oct 28, 2024 14:25:43.736999989 CET	49739	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:25:43.742086887 CET	49739	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:25:43.742240906 CET	443	49739	172.217.18.4	192.168.2.4
Oct 28, 2024 14:25:43.787573099 CET	49739	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:25:43.787585020 CET	443	49739	172.217.18.4	192.168.2.4
Oct 28, 2024 14:25:43.832397938 CET	49739	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:25:43.979269028 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:43.979310036 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:43.979378939 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:43.982884884 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:43.982907057 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:44.839868069 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:44.839936972 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:44.843559980 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:44.843568087 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:44.843856096 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:44.893074036 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:44.918994904 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:44.963326931 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:45.349240065 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:45.349303961 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:45.349385977 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:45.349796057 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:45.349818945 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:45.349848986 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:45.349855900 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:45.406876087 CET	49745	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:45.406928062 CET	443	49745	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:45.407041073 CET	49745	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:45.408181906 CET	49745	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:45.408195019 CET	443	49745	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:46.255558014 CET	443	49745	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:46.255652905 CET	49745	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:46.282989979 CET	49745	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:46.283010006 CET	443	49745	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:46.283368111 CET	443	49745	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:46.287206888 CET	49745	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:46.331322908 CET	443	49745	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:46.532083988 CET	443	49745	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:46.532160997 CET	443	49745	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:46.532216072 CET	49745	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:46.534015894 CET	49745	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:46.534035921 CET	443	49745	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:46.534055948 CET	49745	443	192.168.2.4	184.28.90.27
Oct 28, 2024 14:25:46.534061909 CET	443	49745	184.28.90.27	192.168.2.4
Oct 28, 2024 14:25:51.900230885 CET	49723	80	192.168.2.4	2.19.126.137
Oct 28, 2024 14:25:51.906658888 CET	80	49723	2.19.126.137	192.168.2.4
Oct 28, 2024 14:25:51.906706095 CET	49723	80	192.168.2.4	2.19.126.137
Oct 28, 2024 14:25:53.743977070 CET	443	49739	172.217.18.4	192.168.2.4
Oct 28, 2024 14:25:53.744127035 CET	443	49739	172.217.18.4	192.168.2.4
Oct 28, 2024 14:25:53.744167089 CET	49739	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:25:53.849143028 CET	49739	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:25:53.849173069 CET	443	49739	172.217.18.4	192.168.2.4
Oct 28, 2024 14:26:22.029649973 CET	59214	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:26:22.035160065 CET	53	59214	1.1.1.1	192.168.2.4
Oct 28, 2024 14:26:22.035330057 CET	59214	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:26:22.035343885 CET	59214	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:26:22.040700912 CET	53	59214	1.1.1.1	192.168.2.4
Oct 28, 2024 14:26:22.638895988 CET	53	59214	1.1.1.1	192.168.2.4
Oct 28, 2024 14:26:22.656698942 CET	59214	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:26:22.662440062 CET	53	59214	1.1.1.1	192.168.2.4
Oct 28, 2024 14:26:22.662497044 CET	59214	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:26:28.039053917 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:28.039081097 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:28.039249897 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:28.041759014 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:28.041773081 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:28.784878016 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:28.784950972 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:28.789323092 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:28.789329052 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:28.789586067 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:28.798372030 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:28.839332104 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.023116112 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.023147106 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.023166895 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.023215055 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.023231983 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.023257971 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.023278952 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.053500891 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.053518057 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.053565025 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.053572893 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.053622007 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.142560959 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.142582893 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.142647028 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.142659903 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.142678976 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.142702103 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.171782017 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.171797991 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.171838045 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.171848059 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.171878099 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.171896935 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.173530102 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.173547029 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.173593998 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.173602104 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.173650026 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.213989019 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.214006901 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.214051008 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.214066029 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.214090109 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.214111090 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.260915995 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.260943890 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.260993004 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.261009932 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.261049986 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.261049986 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.289025068 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.289042950 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.289093971 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.289102077 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.289134026 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.289154053 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.290121078 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.290134907 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.290188074 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.290196896 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.290414095 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.291821957 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.291836023 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.291889906 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.291898012 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.291933060 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.293468952 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.293483973 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.293518066 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.293524027 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.293626070 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.295166969 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.295188904 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.295227051 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.295233965 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.295263052 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.295284033 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.378696918 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.378715038 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.378761053 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.378770113 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.378789902 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.378798962 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.378814936 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.378820896 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.378849030 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.378866911 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.378914118 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.406341076 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.406354904 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.406387091 CET	59216	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.406394005 CET	443	59216	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.668592930 CET	59217	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.668643951 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.668720961 CET	59217	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.670311928 CET	59218	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.670341969 CET	443	59218	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.670506954 CET	59218	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.672183990 CET	59219	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.672194004 CET	443	59219	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.672281981 CET	59219	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.672894001 CET	59219	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.672913074 CET	443	59219	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.673142910 CET	59217	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.673155069 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.673412085 CET	59218	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.673425913 CET	443	59218	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.675024033 CET	59220	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.675066948 CET	443	59220	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.675170898 CET	59220	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.675563097 CET	59220	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.675579071 CET	443	59220	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.677648067 CET	59221	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.677689075 CET	443	59221	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:29.677757978 CET	59221	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.679927111 CET	59221	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:29.679944992 CET	443	59221	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.414494038 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.414923906 CET	443	59218	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.415049076 CET	59217	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.415071011 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.415405989 CET	59218	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.415426016 CET	443	59218	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.415574074 CET	59217	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.415580034 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.415977001 CET	59218	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.415982008 CET	443	59218	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.422509909 CET	443	59219	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.422843933 CET	59219	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.422861099 CET	443	59219	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.423222065 CET	59219	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.423226118 CET	443	59219	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.426347017 CET	443	59221	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.426862955 CET	59221	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.426879883 CET	443	59221	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.427272081 CET	59221	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.427282095 CET	443	59221	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.438884020 CET	443	59220	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.439208031 CET	59220	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.439239979 CET	443	59220	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.439583063 CET	59220	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.439589977 CET	443	59220	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.547259092 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.547291994 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.547348022 CET	59217	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.547367096 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.547380924 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.547425985 CET	59217	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.547441006 CET	59217	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.547638893 CET	59217	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.547638893 CET	59217	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.547653913 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.547660112 CET	443	59217	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.547976017 CET	443	59218	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.548000097 CET	443	59218	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.548058987 CET	443	59218	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.548062086 CET	59218	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.548101902 CET	59218	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.548372030 CET	59218	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.548384905 CET	443	59218	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.548392057 CET	59218	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.548397064 CET	443	59218	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.550420046 CET	59223	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.550455093 CET	443	59223	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.550515890 CET	59224	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.550548077 CET	443	59224	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.550600052 CET	59224	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.550615072 CET	59223	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.550771952 CET	59224	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.550780058 CET	59223	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.550782919 CET	443	59224	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.550796986 CET	443	59223	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.554331064 CET	443	59219	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.554548979 CET	443	59219	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.554656982 CET	59219	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.554676056 CET	59219	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.554680109 CET	443	59219	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.554701090 CET	59219	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.554709911 CET	443	59219	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.556473970 CET	59225	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.556549072 CET	443	59225	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.556731939 CET	59225	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.556849003 CET	59225	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.556883097 CET	443	59225	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.560580015 CET	443	59221	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.560646057 CET	443	59221	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.560786963 CET	59221	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.560851097 CET	59221	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.560859919 CET	443	59221	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.560878992 CET	59221	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.560883999 CET	443	59221	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.562630892 CET	59226	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.562642097 CET	443	59226	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.562730074 CET	59226	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.563116074 CET	59226	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.563127995 CET	443	59226	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.583014011 CET	443	59220	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.583034992 CET	443	59220	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.583079100 CET	443	59220	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.583122015 CET	59220	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.583152056 CET	59220	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.583461046 CET	59220	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.583478928 CET	443	59220	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.583487034 CET	59220	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.583492994 CET	443	59220	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.587697983 CET	59227	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.587743044 CET	443	59227	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:30.587852955 CET	59227	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.589306116 CET	59227	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:30.589332104 CET	443	59227	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.293593884 CET	443	59224	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.295511961 CET	59224	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.295531988 CET	443	59224	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.296447039 CET	59224	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.296453953 CET	443	59224	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.302957058 CET	443	59225	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.303421974 CET	59225	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.303472996 CET	443	59225	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.304452896 CET	59225	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.304471970 CET	443	59225	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.305646896 CET	443	59223	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.305852890 CET	443	59226	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.306190014 CET	59223	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.306210995 CET	443	59223	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.306829929 CET	59223	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.306838036 CET	443	59223	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.307621956 CET	59226	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.307641029 CET	443	59226	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.308417082 CET	59226	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.308423042 CET	443	59226	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.308837891 CET	443	59227	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.309473038 CET	59227	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.309490919 CET	443	59227	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.310048103 CET	59227	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.310059071 CET	443	59227	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.428880930 CET	443	59224	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.428953886 CET	443	59224	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.429418087 CET	59224	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.429651022 CET	59224	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.429666042 CET	443	59224	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.429678917 CET	59224	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.429686069 CET	443	59224	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.435075045 CET	443	59225	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.435134888 CET	443	59225	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.435276031 CET	59225	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.435787916 CET	59228	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.435818911 CET	443	59228	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.435872078 CET	59225	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.435925961 CET	443	59225	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.435956955 CET	59225	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.435976028 CET	443	59225	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.436096907 CET	443	59227	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.436108112 CET	59228	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.436263084 CET	443	59227	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.436326981 CET	59227	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.440561056 CET	59229	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.440597057 CET	443	59229	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.440743923 CET	59229	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.440865993 CET	443	59226	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.440895081 CET	443	59223	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.440979004 CET	443	59223	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.441024065 CET	59223	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.441026926 CET	443	59226	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.441061974 CET	59226	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.441070080 CET	59227	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.441086054 CET	443	59227	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.441117048 CET	59227	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.441128016 CET	443	59227	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.445879936 CET	59226	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.445885897 CET	443	59226	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.445899963 CET	59226	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.445904970 CET	443	59226	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.445971012 CET	59229	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.445986986 CET	443	59229	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.446151972 CET	59223	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.446151972 CET	59223	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.446166039 CET	443	59223	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.446177006 CET	443	59223	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.450146914 CET	59228	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.450159073 CET	443	59228	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.454540968 CET	59230	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.454570055 CET	443	59230	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.454674959 CET	59230	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.455260992 CET	59230	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.455270052 CET	443	59230	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.459831953 CET	59231	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.459849119 CET	443	59231	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.460206032 CET	59231	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.461365938 CET	59232	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.461388111 CET	443	59232	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.461514950 CET	59232	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.461831093 CET	59231	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.461843014 CET	443	59231	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:31.462359905 CET	59232	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:31.462372065 CET	443	59232	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.189579010 CET	443	59230	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.190083981 CET	59230	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.190102100 CET	443	59230	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.190541983 CET	59230	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.190546989 CET	443	59230	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.192583084 CET	443	59228	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.192902088 CET	443	59229	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.192948103 CET	59228	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.192960024 CET	443	59228	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.193475008 CET	59228	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.193479061 CET	443	59228	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.193818092 CET	59229	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.193833113 CET	443	59229	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.194004059 CET	443	59231	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.194247961 CET	59229	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.194252968 CET	443	59229	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.194550037 CET	59231	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.194555998 CET	443	59231	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.195019007 CET	59231	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.195024014 CET	443	59231	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.249963045 CET	443	59232	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.250282049 CET	59232	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.250294924 CET	443	59232	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.250783920 CET	59232	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.250787973 CET	443	59232	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.320508003 CET	443	59230	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.320776939 CET	443	59230	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.323337078 CET	59230	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.324805021 CET	59230	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.324805021 CET	59230	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.324822903 CET	443	59230	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.324832916 CET	443	59230	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.325123072 CET	443	59228	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.325892925 CET	443	59228	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.325968027 CET	59228	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.326215982 CET	59228	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.326231003 CET	443	59228	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.326277018 CET	59228	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.326284885 CET	443	59228	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.328685999 CET	59233	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.328739882 CET	443	59233	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.328953028 CET	59233	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.328982115 CET	59234	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.329009056 CET	443	59234	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.329056978 CET	59234	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.329149008 CET	59233	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.329169035 CET	443	59233	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.329216957 CET	59234	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.329231024 CET	443	59234	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.331969023 CET	443	59229	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.334050894 CET	443	59229	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.334119081 CET	59229	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.334175110 CET	59229	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.334175110 CET	59229	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.334189892 CET	443	59229	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.334199905 CET	443	59229	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.336146116 CET	443	59231	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.336162090 CET	59235	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.336177111 CET	443	59235	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.336251974 CET	59235	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.336393118 CET	59235	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.336405993 CET	443	59235	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.336450100 CET	443	59231	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.336543083 CET	59231	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.336596966 CET	59231	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.336597919 CET	59231	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.336604118 CET	443	59231	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.336611032 CET	443	59231	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.338555098 CET	59236	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.338582039 CET	443	59236	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.338648081 CET	59236	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.338803053 CET	59236	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.338814974 CET	443	59236	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.387659073 CET	443	59232	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.387748957 CET	443	59232	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.387859106 CET	59232	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.387897968 CET	59232	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.387909889 CET	443	59232	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.387970924 CET	59232	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.387979031 CET	443	59232	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.390014887 CET	59237	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.390053034 CET	443	59237	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:32.390168905 CET	59237	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.390296936 CET	59237	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:32.390311956 CET	443	59237	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.047704935 CET	443	59233	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.048672915 CET	59233	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.048672915 CET	59233	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.048715115 CET	443	59233	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.048727989 CET	443	59233	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.062722921 CET	443	59234	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.063153028 CET	59234	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.063174963 CET	443	59234	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.063298941 CET	443	59236	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.063565016 CET	59234	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.063572884 CET	443	59234	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.063570976 CET	59236	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.063599110 CET	443	59236	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.063884974 CET	59236	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.063890934 CET	443	59236	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.078924894 CET	443	59235	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.079323053 CET	59235	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.079344034 CET	443	59235	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.079657078 CET	59235	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.079663038 CET	443	59235	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.118931055 CET	443	59237	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.119525909 CET	59237	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.119548082 CET	443	59237	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.119976997 CET	59237	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.119986057 CET	443	59237	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.193068027 CET	443	59234	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.193156004 CET	443	59234	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.193531990 CET	59234	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.193531990 CET	59234	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.193572998 CET	59234	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.193592072 CET	443	59234	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.194905043 CET	443	59236	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.194994926 CET	443	59236	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.195113897 CET	59236	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.195154905 CET	59236	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.195154905 CET	59236	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.195173025 CET	443	59236	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.195182085 CET	443	59236	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.196553946 CET	59238	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.196583033 CET	443	59238	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.197037935 CET	59238	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.197201967 CET	59238	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.197213888 CET	443	59238	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.197220087 CET	59239	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.197267056 CET	443	59239	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.197419882 CET	59239	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.197575092 CET	59239	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.197590113 CET	443	59239	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.213529110 CET	443	59235	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.213799000 CET	443	59235	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.213963032 CET	59235	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.213963032 CET	59235	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.214004993 CET	59235	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.214025974 CET	443	59235	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.216372013 CET	59240	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.216415882 CET	443	59240	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.216543913 CET	59240	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.216669083 CET	59240	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.216685057 CET	443	59240	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.249298096 CET	443	59237	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.249454021 CET	443	59237	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.249624968 CET	59237	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.249624968 CET	59237	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.249725103 CET	59237	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.249737978 CET	443	59237	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.251750946 CET	59241	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.251837969 CET	443	59241	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.251966000 CET	59241	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.252124071 CET	59241	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.252177000 CET	443	59241	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.323225975 CET	443	59233	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.323331118 CET	443	59233	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.323498964 CET	59233	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.323498964 CET	59233	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.323736906 CET	59233	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.323755026 CET	443	59233	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.325776100 CET	59242	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.325808048 CET	443	59242	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.325886011 CET	59242	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.326009989 CET	59242	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.326025009 CET	443	59242	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.925570011 CET	443	59238	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.926140070 CET	59238	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.926166058 CET	443	59238	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.926744938 CET	59238	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.926749945 CET	443	59238	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.928405046 CET	443	59239	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.928868055 CET	59239	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.928909063 CET	443	59239	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.929193020 CET	59239	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.929199934 CET	443	59239	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.951306105 CET	443	59240	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.951679945 CET	59240	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.951694012 CET	443	59240	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:33.952049017 CET	59240	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:33.952054977 CET	443	59240	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.059412956 CET	443	59238	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.059484959 CET	443	59238	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.059556961 CET	59238	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.059778929 CET	59238	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.059794903 CET	443	59238	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.059807062 CET	59238	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.059812069 CET	443	59238	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.062473059 CET	59243	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.062563896 CET	443	59243	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.062799931 CET	59243	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.062956095 CET	59243	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.063010931 CET	443	59243	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.063957930 CET	443	59239	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.064090967 CET	443	59239	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.064167023 CET	59239	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.064203978 CET	59239	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.064220905 CET	443	59239	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.064289093 CET	59239	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.064295053 CET	443	59239	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.066560030 CET	59244	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.066596031 CET	443	59244	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.066684961 CET	59244	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.066855907 CET	59244	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.066869974 CET	443	59244	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.071115971 CET	443	59242	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.071487904 CET	59242	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.071511030 CET	443	59242	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.071898937 CET	59242	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.071911097 CET	443	59242	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.083004951 CET	443	59240	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.083517075 CET	443	59240	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.083564043 CET	59240	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.083595991 CET	59240	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.083614111 CET	443	59240	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.083623886 CET	59240	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.083630085 CET	443	59240	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.085854053 CET	59245	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.085886002 CET	443	59245	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.085979939 CET	59245	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.086114883 CET	59245	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.086128950 CET	443	59245	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.205250025 CET	443	59242	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.205328941 CET	443	59242	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.205410004 CET	59242	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.205545902 CET	59242	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.205545902 CET	59242	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.205568075 CET	443	59242	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.205578089 CET	443	59242	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.208148956 CET	59246	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.208192110 CET	443	59246	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.208338022 CET	59246	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.208498955 CET	59246	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.208520889 CET	443	59246	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.792874098 CET	443	59243	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.793374062 CET	59243	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.793420076 CET	443	59243	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.793879032 CET	59243	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.793886900 CET	443	59243	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.812530041 CET	443	59244	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.812988997 CET	59244	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.813003063 CET	443	59244	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.813430071 CET	59244	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.813436031 CET	443	59244	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.865072012 CET	443	59245	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.865626097 CET	59245	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.865643024 CET	443	59245	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.866102934 CET	59245	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.866108894 CET	443	59245	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.922943115 CET	443	59243	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.923024893 CET	443	59243	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.923197031 CET	59243	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.923239946 CET	59243	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.923239946 CET	59243	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.923263073 CET	443	59243	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.923269033 CET	443	59243	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.926080942 CET	59247	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.926117897 CET	443	59247	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.926187038 CET	59247	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.926506996 CET	59247	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.926527023 CET	443	59247	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.942854881 CET	443	59244	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.943101883 CET	443	59244	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.943180084 CET	443	59246	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.943192005 CET	59244	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.943192005 CET	59244	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.943222046 CET	59244	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.943238974 CET	443	59244	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.943986893 CET	59246	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.944004059 CET	443	59246	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.944420099 CET	59246	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.944425106 CET	443	59246	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.945323944 CET	59248	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.945347071 CET	443	59248	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.945426941 CET	59248	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.945543051 CET	59248	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.945559978 CET	443	59248	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.996634007 CET	443	59245	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.996715069 CET	443	59245	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.996783972 CET	59245	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.996939898 CET	59245	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.996939898 CET	59245	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.996958017 CET	443	59245	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.996967077 CET	443	59245	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.999115944 CET	59249	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.999166965 CET	443	59249	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:34.999226093 CET	59249	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.999385118 CET	59249	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:34.999399900 CET	443	59249	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.074728966 CET	443	59246	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.074804068 CET	443	59246	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.074870110 CET	59246	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.075505972 CET	59246	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.075505972 CET	59246	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.075520039 CET	443	59246	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.075529099 CET	443	59246	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.091258049 CET	59250	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.091305017 CET	443	59250	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.091403008 CET	59250	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.091624022 CET	59250	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.091643095 CET	443	59250	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.661436081 CET	443	59247	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.662328005 CET	59247	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.662347078 CET	443	59247	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.663547039 CET	59247	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.663553953 CET	443	59247	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.681643963 CET	443	59248	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.682396889 CET	59248	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.682431936 CET	443	59248	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.683193922 CET	59248	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.683201075 CET	443	59248	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.725712061 CET	443	59249	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.726732016 CET	59249	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.726748943 CET	443	59249	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.727381945 CET	59249	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.727387905 CET	443	59249	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.796325922 CET	443	59247	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.796477079 CET	443	59247	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.796529055 CET	59247	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.796658993 CET	59247	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.796658993 CET	59247	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.796668053 CET	443	59247	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.796675920 CET	443	59247	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.798074007 CET	443	59241	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.799401045 CET	59241	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.799443007 CET	443	59241	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.800147057 CET	59241	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.800159931 CET	443	59241	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.802154064 CET	59251	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.802184105 CET	443	59251	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.802278042 CET	59251	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.802423954 CET	59251	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.802436113 CET	443	59251	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.811172962 CET	443	59248	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.811296940 CET	443	59248	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.811363935 CET	59248	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.811542988 CET	59248	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.811542988 CET	59248	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.811579943 CET	443	59248	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.811603069 CET	443	59248	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.818339109 CET	59252	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.818355083 CET	443	59252	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.818454027 CET	59252	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.818902969 CET	59252	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.818913937 CET	443	59252	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.838196039 CET	443	59250	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.838818073 CET	59250	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.838884115 CET	443	59250	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.839692116 CET	59250	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.839709044 CET	443	59250	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.860889912 CET	443	59249	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.860959053 CET	443	59249	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.861011028 CET	59249	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.861289978 CET	59249	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.861305952 CET	443	59249	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.861337900 CET	59249	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.861344099 CET	443	59249	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.864520073 CET	59253	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.864573002 CET	443	59253	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.864701033 CET	59253	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.864839077 CET	59253	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.864851952 CET	443	59253	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.930644989 CET	443	59241	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.930885077 CET	443	59241	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.931029081 CET	59241	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.931029081 CET	59241	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.931118011 CET	59241	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.931160927 CET	443	59241	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.936731100 CET	59254	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.936750889 CET	443	59254	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.936858892 CET	59254	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.937045097 CET	59254	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.937056065 CET	443	59254	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.984415054 CET	443	59250	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.984983921 CET	443	59250	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.985063076 CET	59250	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.985168934 CET	59250	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.985209942 CET	443	59250	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.988630056 CET	59255	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.988672018 CET	443	59255	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:35.988745928 CET	59255	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.989181995 CET	59255	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:35.989202023 CET	443	59255	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.544946909 CET	443	59251	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.545475006 CET	59251	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.545496941 CET	443	59251	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.545906067 CET	59251	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.545911074 CET	443	59251	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.549496889 CET	443	59252	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.549864054 CET	59252	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.549881935 CET	443	59252	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.550297976 CET	59252	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.550302029 CET	443	59252	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.596653938 CET	443	59253	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.597146988 CET	59253	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.597166061 CET	443	59253	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.597621918 CET	59253	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.597629070 CET	443	59253	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.657783985 CET	443	59254	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.658288002 CET	59254	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.658317089 CET	443	59254	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.659065008 CET	59254	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.659074068 CET	443	59254	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.680788994 CET	443	59251	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.680872917 CET	443	59251	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.680994034 CET	59251	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.681170940 CET	443	59252	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.681224108 CET	443	59252	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.681291103 CET	59252	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.681355953 CET	59251	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.681375980 CET	443	59251	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.681397915 CET	59251	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.681404114 CET	443	59251	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.682952881 CET	59252	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.682960987 CET	443	59252	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.683037996 CET	59252	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.683043003 CET	443	59252	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.687722921 CET	59256	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.687755108 CET	443	59256	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.688196898 CET	59256	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.688693047 CET	59257	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.688716888 CET	443	59257	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.688886881 CET	59257	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.689122915 CET	59256	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.689141989 CET	443	59256	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.689476013 CET	59257	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.689491987 CET	443	59257	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.726959944 CET	443	59253	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.727040052 CET	443	59253	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.727124929 CET	59253	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.727288008 CET	59253	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.727317095 CET	443	59253	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.727334023 CET	59253	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.727341890 CET	443	59253	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.736531973 CET	443	59255	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.737123966 CET	59258	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.737163067 CET	443	59258	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.737225056 CET	59258	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.738503933 CET	59255	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.738518000 CET	443	59255	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.739269972 CET	59255	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.739274025 CET	443	59255	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.740099907 CET	59258	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.740118980 CET	443	59258	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.789633036 CET	443	59254	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.789808035 CET	443	59254	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.791181087 CET	59254	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.795335054 CET	59254	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.795361042 CET	443	59254	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.795372009 CET	59254	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.795377970 CET	443	59254	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.800301075 CET	59259	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.800342083 CET	443	59259	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:36.800600052 CET	59259	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.800915003 CET	59259	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:36.800941944 CET	443	59259	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.027199030 CET	443	59255	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.027348042 CET	443	59255	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.027487040 CET	59255	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.027666092 CET	59255	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.027686119 CET	443	59255	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.031738043 CET	59260	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.031793118 CET	443	59260	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.032165051 CET	59260	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.032476902 CET	59260	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.032500029 CET	443	59260	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.490140915 CET	443	59258	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.495073080 CET	443	59257	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.497833967 CET	59258	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.497859955 CET	443	59258	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.498842001 CET	59258	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.498848915 CET	443	59258	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.498980045 CET	59257	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.498997927 CET	443	59257	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.499409914 CET	59257	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.499414921 CET	443	59257	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.544728994 CET	443	59259	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.545208931 CET	59259	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.545217991 CET	443	59259	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.546199083 CET	59259	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.546204090 CET	443	59259	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.628351927 CET	443	59258	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.628436089 CET	443	59258	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.628494978 CET	59258	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.628849983 CET	59258	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.628873110 CET	443	59258	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.632683992 CET	443	59257	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.632734060 CET	59261	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.632783890 CET	443	59261	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.632972002 CET	59261	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.632989883 CET	443	59257	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.633249044 CET	59257	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.633534908 CET	59261	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.633550882 CET	443	59261	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.633593082 CET	59257	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.633604050 CET	443	59257	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.633759022 CET	59257	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.633764029 CET	443	59257	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.637562037 CET	59262	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.637582064 CET	443	59262	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.637710094 CET	59262	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.637797117 CET	59262	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.637806892 CET	443	59262	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.681803942 CET	443	59259	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.682501078 CET	443	59259	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.682699919 CET	59259	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.682734013 CET	59259	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.682739973 CET	443	59259	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.682749987 CET	59259	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.682754040 CET	443	59259	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.684636116 CET	59263	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.684672117 CET	443	59263	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.684755087 CET	59263	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.684891939 CET	59263	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.684904099 CET	443	59263	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.753325939 CET	443	59260	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.753680944 CET	59260	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.753715038 CET	443	59260	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.754112005 CET	59260	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.754117966 CET	443	59260	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.882497072 CET	443	59260	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.882755041 CET	443	59260	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.882829905 CET	59260	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.882886887 CET	59260	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.882886887 CET	59260	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.882915974 CET	443	59260	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.882927895 CET	443	59260	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.885641098 CET	59264	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.885679007 CET	443	59264	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:37.885747910 CET	59264	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.885910988 CET	59264	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:37.885925055 CET	443	59264	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.364847898 CET	443	59262	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.383375883 CET	443	59261	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.411184072 CET	59262	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.414463043 CET	443	59263	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.426677942 CET	59261	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.444372892 CET	59262	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.444382906 CET	443	59262	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.446037054 CET	59262	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.446044922 CET	443	59262	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.447710991 CET	59261	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.447737932 CET	443	59261	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.448798895 CET	59261	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.448805094 CET	443	59261	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.449181080 CET	59263	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.449189901 CET	443	59263	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.450748920 CET	59263	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.450753927 CET	443	59263	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.465323925 CET	443	59256	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.466471910 CET	59256	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.466489077 CET	443	59256	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.467710018 CET	59256	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.467767954 CET	443	59256	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.572384119 CET	443	59262	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.572463989 CET	443	59262	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.572763920 CET	59262	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.573040009 CET	59262	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.573050976 CET	443	59262	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.575932026 CET	443	59263	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.576003075 CET	443	59263	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.576066017 CET	59263	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.576782942 CET	59263	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.576793909 CET	443	59263	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.576927900 CET	59263	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.576934099 CET	443	59263	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.577625990 CET	443	59261	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.577685118 CET	443	59261	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.577816010 CET	59261	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.579497099 CET	59265	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.579533100 CET	443	59265	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.579636097 CET	59265	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.581002951 CET	59261	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.581007957 CET	443	59261	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.583930969 CET	59265	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.583947897 CET	443	59265	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.585788012 CET	59266	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.585815907 CET	443	59266	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.585952044 CET	59266	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.587697983 CET	59267	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.587707996 CET	443	59267	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.587807894 CET	59267	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.587958097 CET	59267	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.587971926 CET	443	59267	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.588099003 CET	59266	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.588112116 CET	443	59266	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.594892979 CET	443	59256	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.595124006 CET	443	59256	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.595211029 CET	59256	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.595356941 CET	59256	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.595370054 CET	443	59256	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.595418930 CET	59256	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.595424891 CET	443	59256	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.600393057 CET	59268	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.600414991 CET	443	59268	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.600496054 CET	59268	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.600924015 CET	59268	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.600940943 CET	443	59268	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.615686893 CET	443	59264	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.616250038 CET	59264	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.616261959 CET	443	59264	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.617451906 CET	59264	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.617460012 CET	443	59264	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.745024920 CET	443	59264	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.745132923 CET	443	59264	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.745188951 CET	59264	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.745393038 CET	59264	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.745409966 CET	443	59264	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.745434999 CET	59264	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.745441914 CET	443	59264	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.750453949 CET	59270	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.750503063 CET	443	59270	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:38.750669003 CET	59270	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.751072884 CET	59270	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:38.751096010 CET	443	59270	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.319924116 CET	443	59265	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.320655107 CET	59265	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.320676088 CET	443	59265	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.321563959 CET	59265	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.321569920 CET	443	59265	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.322890043 CET	443	59266	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.323226929 CET	59266	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.323260069 CET	443	59266	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.323750019 CET	59266	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.323760033 CET	443	59266	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.368318081 CET	443	59267	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.368721008 CET	59267	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.368743896 CET	443	59267	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.369302988 CET	59267	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.369309902 CET	443	59267	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.370517969 CET	443	59268	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.370883942 CET	59268	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.370896101 CET	443	59268	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.371332884 CET	59268	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.371339083 CET	443	59268	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.451066971 CET	443	59265	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.451224089 CET	443	59265	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.451287985 CET	59265	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.451430082 CET	59265	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.451436996 CET	443	59265	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.451450109 CET	59265	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.451457024 CET	443	59265	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.454176903 CET	443	59266	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.454457045 CET	59271	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.454498053 CET	443	59271	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.454576969 CET	59271	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.454602957 CET	443	59266	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.454646111 CET	59266	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.454699039 CET	59266	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.454720974 CET	443	59266	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.454735041 CET	59266	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.454746962 CET	443	59266	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.454782963 CET	59271	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.454811096 CET	443	59271	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.457036018 CET	59272	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.457134008 CET	443	59272	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.457396030 CET	59272	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.457396030 CET	59272	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.457473993 CET	443	59272	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.502660990 CET	443	59267	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.502737999 CET	443	59267	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.502782106 CET	59267	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.502913952 CET	59267	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.502913952 CET	59267	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.502924919 CET	443	59267	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.502934933 CET	443	59267	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.504919052 CET	443	59268	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.504986048 CET	443	59268	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.505067110 CET	59268	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.505656958 CET	59273	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.505696058 CET	443	59273	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.505753994 CET	59273	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.506143093 CET	59268	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.506155014 CET	443	59268	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.506197929 CET	59268	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.506201982 CET	443	59268	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.507009029 CET	59273	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.507019997 CET	443	59273	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.508253098 CET	59274	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.508286953 CET	443	59274	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.508435011 CET	59274	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.508649111 CET	59274	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.508692026 CET	443	59274	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.525154114 CET	443	59270	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.525557041 CET	59270	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.525573969 CET	443	59270	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.526124954 CET	59270	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.526129961 CET	443	59270	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.663150072 CET	443	59270	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.664030075 CET	443	59270	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.664076090 CET	59270	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.664136887 CET	59270	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.664148092 CET	443	59270	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.664172888 CET	59270	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.664177895 CET	443	59270	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.667584896 CET	59275	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.667639971 CET	443	59275	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:39.667709112 CET	59275	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.667875051 CET	59275	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:39.667891979 CET	443	59275	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.182924986 CET	443	59272	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.183377981 CET	59272	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.183434010 CET	443	59272	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.183969021 CET	59272	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.183989048 CET	443	59272	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.196466923 CET	443	59271	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.196857929 CET	59271	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.196872950 CET	443	59271	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.197391033 CET	59271	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.197396994 CET	443	59271	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.238347054 CET	443	59273	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.238799095 CET	59273	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.238814116 CET	443	59273	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.239459991 CET	59273	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.239465952 CET	443	59273	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.243660927 CET	443	59274	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.244102001 CET	59274	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.244143963 CET	443	59274	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.244595051 CET	59274	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.244606972 CET	443	59274	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.327801943 CET	443	59271	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.327996969 CET	443	59271	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.328057051 CET	59271	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.328130007 CET	59271	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.328141928 CET	443	59271	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.328155041 CET	59271	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.328161001 CET	443	59271	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.330991030 CET	59276	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.331012964 CET	443	59276	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.331146955 CET	59276	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.331216097 CET	59276	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.331222057 CET	443	59276	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.332330942 CET	443	59272	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.332495928 CET	443	59272	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.332743883 CET	59272	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.332776070 CET	59272	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.332776070 CET	59272	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.332796097 CET	443	59272	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.332809925 CET	443	59272	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.334939003 CET	59277	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.334990978 CET	443	59277	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.335122108 CET	59277	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.335243940 CET	59277	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.335258961 CET	443	59277	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.349029064 CET	49724	80	192.168.2.4	93.184.221.240
Oct 28, 2024 14:26:40.357054949 CET	80	49724	93.184.221.240	192.168.2.4
Oct 28, 2024 14:26:40.357145071 CET	49724	80	192.168.2.4	93.184.221.240
Oct 28, 2024 14:26:40.369330883 CET	443	59273	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.369390011 CET	443	59273	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.369492054 CET	59273	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.369575977 CET	59273	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.369575977 CET	59273	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.369594097 CET	443	59273	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.369601011 CET	443	59273	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.371661901 CET	59278	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.371675968 CET	443	59278	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.371803999 CET	59278	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.371917963 CET	59278	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.371932030 CET	443	59278	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.375554085 CET	443	59274	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.375622034 CET	443	59274	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.375688076 CET	59274	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.375803947 CET	59274	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.375803947 CET	59274	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.375828981 CET	443	59274	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.375850916 CET	443	59274	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.377691984 CET	59279	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.377716064 CET	443	59279	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.377789974 CET	59279	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.377931118 CET	59279	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.377940893 CET	443	59279	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.403362036 CET	443	59275	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.403696060 CET	59275	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.403704882 CET	443	59275	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.404202938 CET	59275	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.404207945 CET	443	59275	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.534219027 CET	443	59275	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.534284115 CET	443	59275	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.534357071 CET	59275	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.534528017 CET	59275	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.534542084 CET	443	59275	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.534564018 CET	59275	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.534570932 CET	443	59275	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.537764072 CET	59280	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.537792921 CET	443	59280	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:40.538034916 CET	59280	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.538034916 CET	59280	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:40.538067102 CET	443	59280	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.065794945 CET	443	59277	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.066258907 CET	59277	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.066271067 CET	443	59277	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.066725969 CET	59277	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.066730976 CET	443	59277	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.075035095 CET	443	59276	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.075388908 CET	59276	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.075398922 CET	443	59276	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.075875044 CET	59276	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.075887918 CET	443	59276	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.113060951 CET	443	59278	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.113401890 CET	59278	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.113414049 CET	443	59279	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.113420010 CET	443	59278	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.113790035 CET	59278	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.113805056 CET	443	59278	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.113887072 CET	59279	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.113897085 CET	443	59279	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.114368916 CET	59279	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.114375114 CET	443	59279	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.194139004 CET	443	59277	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.194840908 CET	443	59277	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.194982052 CET	59277	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.194982052 CET	59277	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.195024014 CET	59277	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.195041895 CET	443	59277	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.197604895 CET	59281	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.197698116 CET	443	59281	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.197772026 CET	59281	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.197959900 CET	59281	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.197993994 CET	443	59281	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.208393097 CET	443	59276	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.208708048 CET	443	59276	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.208781958 CET	59276	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.208848000 CET	59276	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.208858967 CET	443	59276	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.211112022 CET	59282	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.211153984 CET	443	59282	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.211247921 CET	59282	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.211412907 CET	59282	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.211429119 CET	443	59282	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.243711948 CET	443	59278	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.243990898 CET	443	59278	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.244051933 CET	59278	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.244170904 CET	59278	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.244188070 CET	443	59278	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.244199991 CET	59278	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.244205952 CET	443	59278	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.246579885 CET	59283	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.246623993 CET	443	59283	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.246754885 CET	59283	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.246967077 CET	59283	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.246984959 CET	443	59283	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.249094963 CET	443	59279	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.249156952 CET	443	59279	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.249289036 CET	59279	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.249397993 CET	59279	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.249397993 CET	59279	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.249408007 CET	443	59279	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.249416113 CET	443	59279	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.251265049 CET	59284	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.251276016 CET	443	59284	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.251694918 CET	59284	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.251889944 CET	59284	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.251900911 CET	443	59284	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.312619925 CET	443	59280	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.313095093 CET	59280	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.313107967 CET	443	59280	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.313632965 CET	59280	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.313638926 CET	443	59280	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.451308012 CET	443	59280	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.452649117 CET	443	59280	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.452702045 CET	59280	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.452744007 CET	59280	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.452764988 CET	443	59280	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.452783108 CET	59280	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.452790976 CET	443	59280	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.455423117 CET	59285	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.455450058 CET	443	59285	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.455573082 CET	59285	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.455735922 CET	59285	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.455745935 CET	443	59285	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.943130016 CET	443	59282	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.944719076 CET	443	59281	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.950788021 CET	59282	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.950802088 CET	443	59282	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.950963020 CET	59281	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.951037884 CET	443	59281	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.951322079 CET	59282	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.951328993 CET	443	59282	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.951469898 CET	59281	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.951483011 CET	443	59281	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.995378017 CET	443	59284	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.995817900 CET	59284	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.995836020 CET	443	59284	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.996316910 CET	59284	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:41.996325016 CET	443	59284	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:41.999638081 CET	443	59283	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.000025034 CET	59283	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.000066042 CET	443	59283	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.000431061 CET	59283	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.000443935 CET	443	59283	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.076347113 CET	443	59282	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.076546907 CET	443	59282	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.076612949 CET	59282	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.076642990 CET	59282	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.076663017 CET	443	59282	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.076694012 CET	59282	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.076703072 CET	443	59282	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.079154015 CET	59286	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.079191923 CET	443	59286	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.079282045 CET	59286	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.079408884 CET	59286	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.079422951 CET	443	59286	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.080527067 CET	443	59281	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.080678940 CET	443	59281	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.080741882 CET	59281	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.080827951 CET	59281	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.080827951 CET	59281	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.080873966 CET	443	59281	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.080902100 CET	443	59281	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.082834959 CET	59287	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.082858086 CET	443	59287	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.082941055 CET	59287	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.083086967 CET	59287	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.083098888 CET	443	59287	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.125188112 CET	443	59284	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.125252008 CET	443	59284	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.125310898 CET	59284	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.125421047 CET	59284	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.125421047 CET	59284	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.125437021 CET	443	59284	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.125446081 CET	443	59284	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.127348900 CET	59288	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.127379894 CET	443	59288	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.127454996 CET	59288	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.127641916 CET	59288	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.127656937 CET	443	59288	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.132054090 CET	443	59283	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.132127047 CET	443	59283	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.132217884 CET	59283	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.132261038 CET	59283	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.132285118 CET	443	59283	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.132319927 CET	59283	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.132333994 CET	443	59283	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.134121895 CET	59289	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.134165049 CET	443	59289	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.134289026 CET	59289	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.134413958 CET	59289	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.134432077 CET	443	59289	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.179083109 CET	443	59285	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.179440022 CET	59285	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.179450035 CET	443	59285	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.179842949 CET	59285	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.179848909 CET	443	59285	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.343257904 CET	443	59285	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.343353987 CET	443	59285	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.343559980 CET	59285	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.343559980 CET	59285	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.343592882 CET	59285	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.343614101 CET	443	59285	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.346196890 CET	59290	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.346236944 CET	443	59290	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.346297026 CET	59290	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.346472025 CET	59290	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.346488953 CET	443	59290	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.815448999 CET	443	59286	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.815915108 CET	59286	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.815937042 CET	443	59286	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.816402912 CET	59286	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.816407919 CET	443	59286	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.825181007 CET	443	59287	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.825581074 CET	59287	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.825603008 CET	443	59287	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.825953007 CET	59287	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.825958967 CET	443	59287	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.865205050 CET	443	59288	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.867295027 CET	59288	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.867325068 CET	443	59288	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.867762089 CET	59288	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.867767096 CET	443	59288	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.868525028 CET	443	59289	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.869292974 CET	59289	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.869340897 CET	443	59289	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.869806051 CET	59289	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.869812965 CET	443	59289	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.898468971 CET	59291	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:26:42.898510933 CET	443	59291	172.217.18.4	192.168.2.4
Oct 28, 2024 14:26:42.898632050 CET	59291	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:26:42.898792028 CET	59291	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:26:42.898818970 CET	443	59291	172.217.18.4	192.168.2.4
Oct 28, 2024 14:26:42.955745935 CET	443	59287	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.956140041 CET	443	59287	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.956317902 CET	59287	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.956434965 CET	59287	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.956434965 CET	59287	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.956456900 CET	443	59287	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.956479073 CET	443	59287	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.960014105 CET	59292	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.960057020 CET	443	59292	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.960285902 CET	59292	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.960412025 CET	59292	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:42.960421085 CET	443	59292	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.997104883 CET	443	59288	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.997175932 CET	443	59288	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:42.997217894 CET	59288	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.000039101 CET	443	59289	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.000374079 CET	443	59289	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.000433922 CET	59289	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.002212048 CET	59288	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.002233982 CET	443	59288	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.002243996 CET	59288	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.002249002 CET	443	59288	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.012309074 CET	59289	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.012309074 CET	59289	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.012332916 CET	443	59289	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.012351990 CET	443	59289	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.017633915 CET	59293	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.017663002 CET	443	59293	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.017739058 CET	59293	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.018773079 CET	59294	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.018843889 CET	443	59294	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.018928051 CET	59294	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.019243956 CET	59293	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.019262075 CET	443	59293	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.019702911 CET	59294	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.019737005 CET	443	59294	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.101999044 CET	443	59286	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.102138996 CET	443	59286	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.102204084 CET	59286	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.102401018 CET	59286	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.102401018 CET	59286	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.102426052 CET	443	59286	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.102443933 CET	443	59286	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.106770992 CET	59295	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.106791019 CET	443	59295	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.107084036 CET	59295	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.107235909 CET	59295	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.107247114 CET	443	59295	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.115698099 CET	443	59290	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.116759062 CET	59290	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.116775036 CET	443	59290	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.117743969 CET	59290	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.117749929 CET	443	59290	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.248603106 CET	443	59290	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.248686075 CET	443	59290	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.248764038 CET	59290	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.248999119 CET	59290	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.249012947 CET	443	59290	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.249042034 CET	59290	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.249047041 CET	443	59290	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.252722979 CET	59296	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.252759933 CET	443	59296	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.252921104 CET	59296	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.253187895 CET	59296	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.253202915 CET	443	59296	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.703159094 CET	443	59292	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.704265118 CET	59292	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.704277992 CET	443	59292	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.705451965 CET	59292	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.705456972 CET	443	59292	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.749367952 CET	443	59294	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.749778032 CET	59294	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.749815941 CET	443	59294	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.750804901 CET	59294	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.750811100 CET	443	59294	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.760982037 CET	443	59291	172.217.18.4	192.168.2.4
Oct 28, 2024 14:26:43.761409044 CET	59291	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:26:43.761421919 CET	443	59291	172.217.18.4	192.168.2.4
Oct 28, 2024 14:26:43.762501001 CET	443	59291	172.217.18.4	192.168.2.4
Oct 28, 2024 14:26:43.763292074 CET	59291	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:26:43.763483047 CET	443	59291	172.217.18.4	192.168.2.4
Oct 28, 2024 14:26:43.767728090 CET	443	59293	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.768429041 CET	59293	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.768457890 CET	443	59293	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.769166946 CET	59293	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.769175053 CET	443	59293	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.817651987 CET	59291	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:26:43.835432053 CET	443	59292	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.835571051 CET	443	59292	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.835625887 CET	59292	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.835747957 CET	59292	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.835762024 CET	443	59292	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.835774899 CET	59292	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.835782051 CET	443	59292	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.839126110 CET	59297	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.839205980 CET	443	59297	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.839328051 CET	59297	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.839519024 CET	59297	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.839554071 CET	443	59297	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.875377893 CET	443	59295	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.875715971 CET	59295	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.875729084 CET	443	59295	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.876218081 CET	59295	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.876224995 CET	443	59295	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.883843899 CET	443	59294	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.884040117 CET	443	59294	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.884115934 CET	59294	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.884191990 CET	59294	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.884191990 CET	59294	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.884227037 CET	443	59294	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.884244919 CET	443	59294	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.886195898 CET	59298	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.886240959 CET	443	59298	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.886329889 CET	59298	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.886430025 CET	59298	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.886444092 CET	443	59298	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.901202917 CET	443	59293	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.901609898 CET	443	59293	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.901652098 CET	59293	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.901741028 CET	59293	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.901741028 CET	59293	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.901753902 CET	443	59293	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.901762962 CET	443	59293	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.903589964 CET	59299	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.903626919 CET	443	59299	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:43.903896093 CET	59299	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.904046059 CET	59299	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:43.904069901 CET	443	59299	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.003202915 CET	443	59296	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.003874063 CET	59296	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.003885984 CET	443	59296	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.004419088 CET	59296	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.004425049 CET	443	59296	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.012274027 CET	443	59295	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.012307882 CET	443	59295	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.012412071 CET	59295	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.012429953 CET	443	59295	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.013314962 CET	59295	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.015779018 CET	59295	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.015779972 CET	59295	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.015805960 CET	443	59295	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.015818119 CET	443	59295	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.019853115 CET	59300	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.019882917 CET	443	59300	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.019952059 CET	59300	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.020311117 CET	59300	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.020323992 CET	443	59300	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.136027098 CET	443	59296	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.136096001 CET	443	59296	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.136217117 CET	59296	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.136296988 CET	59296	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.136315107 CET	443	59296	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.136327982 CET	59296	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.136336088 CET	443	59296	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.138863087 CET	59301	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.138900042 CET	443	59301	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.138947010 CET	59301	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.139071941 CET	59301	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.139094114 CET	443	59301	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.594733953 CET	443	59297	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.595376015 CET	59297	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.595422029 CET	443	59297	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.596191883 CET	59297	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.596210957 CET	443	59297	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.626497030 CET	443	59299	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.627566099 CET	59299	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.627585888 CET	443	59299	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.628357887 CET	59299	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.628371000 CET	443	59299	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.629637957 CET	443	59298	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.630053997 CET	59298	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.630069971 CET	443	59298	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.631107092 CET	59298	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.631114006 CET	443	59298	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.730262041 CET	443	59297	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.730443954 CET	443	59297	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.730509996 CET	59297	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.741398096 CET	59297	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.741421938 CET	443	59297	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.747819901 CET	59302	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.747848988 CET	443	59302	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.747963905 CET	59302	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.748883963 CET	59302	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.748895884 CET	443	59302	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.751764059 CET	443	59300	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.752558947 CET	59300	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.752567053 CET	443	59300	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.753568888 CET	59300	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.753575087 CET	443	59300	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.756839991 CET	443	59299	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.756865978 CET	443	59299	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.756922007 CET	443	59299	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.756946087 CET	59299	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.756975889 CET	59299	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.757525921 CET	59299	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.757546902 CET	443	59299	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.757560015 CET	59299	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.757572889 CET	443	59299	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.763115883 CET	59303	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.763144970 CET	443	59303	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.763211966 CET	59303	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.764316082 CET	59303	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.764334917 CET	443	59303	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.796808958 CET	443	59298	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.796837091 CET	443	59298	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.796907902 CET	443	59298	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.796951056 CET	59298	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.796951056 CET	59298	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.797396898 CET	59298	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.797396898 CET	59298	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.797415018 CET	443	59298	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.797427893 CET	443	59298	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.803131104 CET	59304	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.803174019 CET	443	59304	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.803236008 CET	59304	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.804147005 CET	59304	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.804178953 CET	443	59304	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.869398117 CET	443	59301	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.869920969 CET	59301	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.869945049 CET	443	59301	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.870577097 CET	59301	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.870595932 CET	443	59301	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.883687973 CET	443	59300	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.883708954 CET	443	59300	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.883758068 CET	59300	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.883759975 CET	443	59300	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.883814096 CET	59300	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.884110928 CET	59300	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.884131908 CET	443	59300	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.887985945 CET	59305	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.888019085 CET	443	59305	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.888094902 CET	59305	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.888267040 CET	59305	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.888282061 CET	443	59305	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.998194933 CET	443	59301	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.998333931 CET	443	59301	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.998430967 CET	59301	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.998516083 CET	59301	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.998538017 CET	443	59301	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:44.998554945 CET	59301	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:44.998563051 CET	443	59301	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.002146006 CET	59306	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.002192974 CET	443	59306	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.002504110 CET	59306	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.002756119 CET	59306	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.002780914 CET	443	59306	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.488209963 CET	443	59303	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.488681078 CET	59303	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.488697052 CET	443	59303	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.489139080 CET	59303	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.489145994 CET	443	59303	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.493905067 CET	443	59302	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.494245052 CET	59302	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.494252920 CET	443	59302	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.494625092 CET	59302	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.494628906 CET	443	59302	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.532911062 CET	443	59304	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.533236027 CET	59304	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.533267975 CET	443	59304	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.533646107 CET	59304	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.533658981 CET	443	59304	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.617909908 CET	443	59303	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.618715048 CET	443	59303	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.618763924 CET	59303	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.618819952 CET	59303	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.618834972 CET	443	59303	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.618839025 CET	59303	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.618845940 CET	443	59303	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.621295929 CET	59307	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.621325016 CET	443	59307	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.621392012 CET	59307	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.621548891 CET	59307	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.621563911 CET	443	59307	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.627667904 CET	443	59302	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.627741098 CET	443	59302	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.627796888 CET	59302	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.628015995 CET	59302	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.628015995 CET	59302	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.628031015 CET	443	59302	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.628041983 CET	443	59302	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.630287886 CET	59308	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.630317926 CET	443	59308	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.630795956 CET	59308	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.631009102 CET	59308	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.631016970 CET	443	59308	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.634520054 CET	443	59305	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.634877920 CET	59305	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.634891033 CET	443	59305	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.635302067 CET	59305	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.635305882 CET	443	59305	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.664587975 CET	443	59304	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.664726019 CET	443	59304	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.664868116 CET	59304	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.665035009 CET	59304	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.665062904 CET	443	59304	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.665080070 CET	59304	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.665088892 CET	443	59304	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.667999029 CET	59309	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.668035030 CET	443	59309	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.668448925 CET	59309	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.668579102 CET	59309	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.668593884 CET	443	59309	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.744513988 CET	443	59306	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.744987011 CET	59306	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.745028973 CET	443	59306	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.745451927 CET	59306	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.745476007 CET	443	59306	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.768774986 CET	443	59305	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.768841028 CET	443	59305	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.768914938 CET	59305	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.769063950 CET	59305	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.769083977 CET	443	59305	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.769094944 CET	59305	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.769099951 CET	443	59305	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.772937059 CET	59310	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.773017883 CET	443	59310	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.773312092 CET	59310	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.773695946 CET	59310	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.773705959 CET	443	59310	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.885699034 CET	443	59306	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.885777950 CET	443	59306	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.885967970 CET	59306	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.886303902 CET	59306	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.886337996 CET	443	59306	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.886354923 CET	59306	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.886364937 CET	443	59306	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.891156912 CET	59311	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.891191006 CET	443	59311	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:45.891426086 CET	59311	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.891781092 CET	59311	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:45.891798019 CET	443	59311	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.340686083 CET	443	59307	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.341344118 CET	59307	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.341362953 CET	443	59307	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.342114925 CET	59307	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.342123032 CET	443	59307	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.372037888 CET	443	59308	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.372477055 CET	59308	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.372493029 CET	443	59308	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.373163939 CET	59308	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.373169899 CET	443	59308	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.415479898 CET	443	59309	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.420085907 CET	59309	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.420110941 CET	443	59309	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.420819998 CET	59309	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.420825005 CET	443	59309	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.469522953 CET	443	59307	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.469808102 CET	443	59307	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.469892025 CET	59307	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.469939947 CET	59307	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.469963074 CET	443	59307	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.469980001 CET	59307	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.469985962 CET	443	59307	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.474859953 CET	59312	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.474884033 CET	443	59312	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.475027084 CET	59312	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.475665092 CET	59312	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.475680113 CET	443	59312	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.506521940 CET	443	59308	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.506635904 CET	443	59308	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.506683111 CET	59308	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.507019997 CET	59308	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.507035017 CET	443	59308	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.507045031 CET	59308	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.507050991 CET	443	59308	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.508057117 CET	443	59310	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.509228945 CET	59310	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.509238005 CET	443	59310	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.510042906 CET	59310	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.510046959 CET	443	59310	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.512514114 CET	59313	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.512551069 CET	443	59313	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.512624025 CET	59313	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.512887955 CET	59313	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.512903929 CET	443	59313	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.548809052 CET	443	59309	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.548877001 CET	443	59309	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.549108028 CET	59309	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.549256086 CET	59309	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.549256086 CET	59309	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.549269915 CET	443	59309	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.549278975 CET	443	59309	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.551898956 CET	59314	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.551911116 CET	443	59314	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.552045107 CET	59314	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.552982092 CET	59314	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.552993059 CET	443	59314	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.625252962 CET	443	59311	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.626156092 CET	59311	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.626171112 CET	443	59311	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.626888037 CET	59311	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.626893044 CET	443	59311	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.637959957 CET	443	59310	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.638021946 CET	443	59310	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.638077974 CET	59310	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.638252020 CET	59310	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.638266087 CET	443	59310	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.638278008 CET	59310	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.638283014 CET	443	59310	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.640917063 CET	59315	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.640940905 CET	443	59315	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.641180992 CET	59315	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.641300917 CET	59315	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.641319036 CET	443	59315	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.758344889 CET	443	59311	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.758377075 CET	443	59311	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.758435965 CET	443	59311	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.758459091 CET	59311	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.758492947 CET	59311	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.762660027 CET	59311	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.762684107 CET	443	59311	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.762696981 CET	59311	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.762703896 CET	443	59311	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.765955925 CET	59316	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.765986919 CET	443	59316	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:46.766185045 CET	59316	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.766289949 CET	59316	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:46.766307116 CET	443	59316	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.236126900 CET	443	59312	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.236622095 CET	59312	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.236637115 CET	443	59312	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.238013983 CET	59312	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.238019943 CET	443	59312	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.260472059 CET	443	59313	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.260818958 CET	59313	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.260844946 CET	443	59313	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.261209011 CET	59313	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.261214018 CET	443	59313	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.329087019 CET	443	59314	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.329416990 CET	59314	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.329433918 CET	443	59314	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.329781055 CET	59314	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.329787970 CET	443	59314	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.369534016 CET	443	59312	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.369605064 CET	443	59312	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.369757891 CET	59312	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.369781971 CET	59312	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.369796991 CET	443	59312	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.369807959 CET	59312	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.369812965 CET	443	59312	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.372303009 CET	59317	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.372423887 CET	443	59317	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.372507095 CET	59317	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.372673035 CET	59317	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.372698069 CET	443	59317	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.381002903 CET	443	59315	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.381329060 CET	59315	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.381349087 CET	443	59315	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.381726027 CET	59315	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.381731033 CET	443	59315	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.393959045 CET	443	59313	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.394026995 CET	443	59313	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.394098997 CET	443	59313	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.394154072 CET	59313	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.394182920 CET	59313	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.394196033 CET	443	59313	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.394205093 CET	59313	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.394210100 CET	443	59313	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.396377087 CET	59318	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.396413088 CET	443	59318	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.396598101 CET	59318	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.396720886 CET	59318	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.396737099 CET	443	59318	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.460051060 CET	443	59314	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.460145950 CET	443	59314	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.460196018 CET	59314	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.460397005 CET	59314	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.460397005 CET	59314	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.460411072 CET	443	59314	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.460417986 CET	443	59314	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.463238955 CET	59319	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.463339090 CET	443	59319	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.463438988 CET	59319	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.463588953 CET	59319	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.463623047 CET	443	59319	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.520384073 CET	443	59315	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.520560980 CET	443	59315	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.520628929 CET	59315	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.520744085 CET	59315	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.520761967 CET	443	59315	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.523647070 CET	59320	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.523719072 CET	443	59320	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.523924112 CET	59320	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.524086952 CET	59320	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.524120092 CET	443	59320	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.533392906 CET	443	59316	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.533811092 CET	59316	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.533833027 CET	443	59316	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.534254074 CET	59316	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.534260035 CET	443	59316	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.670042992 CET	443	59316	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.670115948 CET	443	59316	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.670198917 CET	59316	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.670373917 CET	59316	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.670373917 CET	59316	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.670391083 CET	443	59316	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.670398951 CET	443	59316	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.672930002 CET	59321	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.672969103 CET	443	59321	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:47.673047066 CET	59321	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.673211098 CET	59321	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:47.673223972 CET	443	59321	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.125466108 CET	443	59317	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.125969887 CET	59317	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.126020908 CET	443	59317	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.126475096 CET	59317	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.126487017 CET	443	59317	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.130317926 CET	443	59318	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.130820990 CET	59318	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.130840063 CET	443	59318	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.131150961 CET	59318	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.131158113 CET	443	59318	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.188451052 CET	443	59319	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.188926935 CET	59319	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.188946962 CET	443	59319	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.189374924 CET	59319	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.189388037 CET	443	59319	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.258146048 CET	443	59317	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.258223057 CET	443	59317	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.258316994 CET	59317	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.258341074 CET	443	59317	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.258399010 CET	59317	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.258537054 CET	59317	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.258549929 CET	443	59317	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.258582115 CET	59317	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.258586884 CET	443	59317	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.261382103 CET	59322	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.261467934 CET	443	59322	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.261468887 CET	443	59318	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.261563063 CET	59322	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.261611938 CET	443	59318	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.261677027 CET	59318	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.261681080 CET	59322	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.261703968 CET	443	59322	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.261709929 CET	59318	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.261723995 CET	443	59318	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.261734962 CET	59318	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.261739969 CET	443	59318	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.263786077 CET	59323	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.263822079 CET	443	59323	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.264008999 CET	59323	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.264136076 CET	59323	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.264147043 CET	443	59323	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.265042067 CET	443	59320	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.265381098 CET	59320	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.265398979 CET	443	59320	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.265839100 CET	59320	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.265850067 CET	443	59320	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.319763899 CET	443	59319	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.319838047 CET	443	59319	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.319947004 CET	59319	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.319996119 CET	59319	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.320010900 CET	443	59319	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.320018053 CET	59319	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.320024014 CET	443	59319	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.321856022 CET	59324	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.321882010 CET	443	59324	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.322056055 CET	59324	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.322189093 CET	59324	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.322204113 CET	443	59324	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.396199942 CET	443	59321	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.396567106 CET	59321	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.396580935 CET	443	59321	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.396971941 CET	59321	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.396976948 CET	443	59321	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.401741028 CET	443	59320	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.401812077 CET	443	59320	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.401896000 CET	59320	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.401983023 CET	59320	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.402031898 CET	443	59320	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.402070045 CET	59320	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.402087927 CET	443	59320	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.403978109 CET	59325	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.404016972 CET	443	59325	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.404109001 CET	59325	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.404309034 CET	59325	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.404324055 CET	443	59325	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.526702881 CET	443	59321	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.526724100 CET	443	59321	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.526763916 CET	443	59321	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.526806116 CET	59321	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.526859045 CET	59321	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.527133942 CET	59321	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.527133942 CET	59321	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.527152061 CET	443	59321	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.527160883 CET	443	59321	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.529907942 CET	59326	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.529952049 CET	443	59326	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:48.530019045 CET	59326	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.530195951 CET	59326	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:48.530220985 CET	443	59326	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.037499905 CET	443	59322	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.038012981 CET	59322	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.038067102 CET	443	59322	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.038516998 CET	59322	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.038532019 CET	443	59322	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.045716047 CET	443	59324	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.046027899 CET	59324	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.046039104 CET	443	59324	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.046381950 CET	59324	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.046386003 CET	443	59324	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.148761034 CET	443	59325	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.149211884 CET	59325	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.149238110 CET	443	59325	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.149718046 CET	59325	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.149724007 CET	443	59325	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.178622961 CET	443	59324	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.178704977 CET	443	59324	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.178857088 CET	59324	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.179132938 CET	443	59322	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.179198980 CET	59324	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.179219961 CET	443	59324	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.179231882 CET	59324	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.179236889 CET	443	59324	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.179919958 CET	443	59322	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.180263996 CET	59322	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.185683966 CET	59322	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.185731888 CET	443	59322	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.185750008 CET	59322	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.185766935 CET	443	59322	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.187644958 CET	59327	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.187681913 CET	443	59327	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.187781096 CET	59327	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.187781096 CET	59328	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.187820911 CET	443	59328	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.187889099 CET	59328	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.187901974 CET	59327	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.187920094 CET	443	59327	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.188301086 CET	59328	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.188312054 CET	443	59328	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.208210945 CET	443	59323	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.208755970 CET	59323	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.208776951 CET	443	59323	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.209196091 CET	59323	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.209211111 CET	443	59323	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.263020039 CET	443	59326	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.263371944 CET	59326	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.263382912 CET	443	59326	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.263799906 CET	59326	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.263804913 CET	443	59326	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.282368898 CET	443	59325	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.282414913 CET	443	59325	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.282613993 CET	59325	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.282664061 CET	59325	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.282664061 CET	59325	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.282679081 CET	443	59325	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.282689095 CET	443	59325	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.285176992 CET	59329	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.285200119 CET	443	59329	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.285322905 CET	59329	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.285528898 CET	59329	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.285542011 CET	443	59329	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.341846943 CET	443	59323	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.341875076 CET	443	59323	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.341912031 CET	443	59323	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.341962099 CET	59323	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.341984034 CET	59323	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.342150927 CET	59323	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.342165947 CET	443	59323	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.342176914 CET	59323	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.342184067 CET	443	59323	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.344522953 CET	59330	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.344554901 CET	443	59330	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.344629049 CET	59330	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.344819069 CET	59330	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.344829082 CET	443	59330	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.398190022 CET	443	59326	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.398247004 CET	443	59326	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.398293018 CET	59326	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.398417950 CET	59326	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.398436069 CET	443	59326	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.398447990 CET	59326	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.398452997 CET	443	59326	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.400469065 CET	59331	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.400485992 CET	443	59331	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.400585890 CET	59331	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.400726080 CET	59331	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.400739908 CET	443	59331	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.920384884 CET	443	59327	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.920933962 CET	59327	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.920948982 CET	443	59327	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.921412945 CET	59327	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.921418905 CET	443	59327	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.933645964 CET	443	59328	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.933993101 CET	59328	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.934005022 CET	443	59328	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:49.934345961 CET	59328	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:49.934350967 CET	443	59328	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.020039082 CET	443	59329	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.020375013 CET	59329	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.020391941 CET	443	59329	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.020771980 CET	59329	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.020776033 CET	443	59329	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.053580046 CET	443	59327	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.053679943 CET	443	59327	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.053733110 CET	443	59327	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.053826094 CET	59327	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.053881884 CET	59327	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.053881884 CET	59327	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.053900003 CET	443	59327	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.053909063 CET	443	59327	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.056639910 CET	59332	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.056674957 CET	443	59332	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.056832075 CET	59332	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.056984901 CET	59332	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.056999922 CET	443	59332	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.066194057 CET	443	59328	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.066263914 CET	443	59328	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.066334009 CET	59328	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.066400051 CET	59328	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.066400051 CET	59328	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.066406965 CET	443	59328	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.066410065 CET	443	59328	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.068906069 CET	59333	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.068948030 CET	443	59333	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.069024086 CET	59333	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.069200993 CET	59333	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.069227934 CET	443	59333	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.133403063 CET	443	59331	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.133759022 CET	59331	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.133769989 CET	443	59331	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.134207010 CET	59331	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.134212971 CET	443	59331	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.150775909 CET	443	59329	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.150831938 CET	443	59329	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.150943041 CET	59329	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.150985003 CET	59329	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.151000023 CET	443	59329	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.151007891 CET	59329	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.151014090 CET	443	59329	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.153016090 CET	59334	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.153048992 CET	443	59334	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.153151989 CET	59334	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.153305054 CET	59334	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.153316975 CET	443	59334	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.265471935 CET	443	59331	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.265502930 CET	443	59331	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.265556097 CET	443	59331	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.265573978 CET	59331	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.265831947 CET	59331	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.265832901 CET	59331	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.265856028 CET	443	59331	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.265872955 CET	59331	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.265881062 CET	443	59331	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.268557072 CET	59335	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.268625975 CET	443	59335	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.268769979 CET	59335	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.268915892 CET	59335	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.268940926 CET	443	59335	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.807897091 CET	443	59333	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.808500051 CET	59333	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.808523893 CET	443	59333	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.809385061 CET	59333	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.809396029 CET	443	59333	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.814393044 CET	443	59332	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.814760923 CET	59332	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.814773083 CET	443	59332	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.815339088 CET	59332	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.815342903 CET	443	59332	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.891954899 CET	443	59334	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.903990984 CET	59334	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.904005051 CET	443	59334	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.904519081 CET	59334	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.904524088 CET	443	59334	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.938324928 CET	443	59333	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.939944983 CET	443	59333	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.940027952 CET	59333	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.940175056 CET	59333	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.940206051 CET	443	59333	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.940232992 CET	59333	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.940244913 CET	443	59333	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.946137905 CET	59336	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.946180105 CET	443	59336	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.946309090 CET	59336	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.946561098 CET	59336	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.946576118 CET	443	59336	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.948103905 CET	443	59332	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.948187113 CET	443	59332	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.948244095 CET	59332	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.948450089 CET	59332	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.948450089 CET	59332	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.948462963 CET	443	59332	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.948467970 CET	443	59332	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.952086926 CET	59337	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.952117920 CET	443	59337	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.952215910 CET	59337	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.952438116 CET	59337	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:50.952451944 CET	443	59337	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:50.999561071 CET	443	59335	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.005950928 CET	59335	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.005970001 CET	443	59335	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.007359028 CET	59335	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.007370949 CET	443	59335	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.031799078 CET	443	59334	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.031857014 CET	443	59334	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.031930923 CET	59334	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.039856911 CET	59334	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.039884090 CET	443	59334	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.039896965 CET	59334	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.039902925 CET	443	59334	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.134322882 CET	443	59335	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.134351969 CET	443	59335	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.134397030 CET	443	59335	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.134421110 CET	59335	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.134459972 CET	59335	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.147481918 CET	59335	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.147509098 CET	443	59335	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.147533894 CET	59335	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.147547007 CET	443	59335	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.175101995 CET	59338	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.175143957 CET	443	59338	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.175215960 CET	59338	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.178453922 CET	59339	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.178481102 CET	443	59339	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.178538084 CET	59339	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.178702116 CET	59338	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.178719044 CET	443	59338	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.179722071 CET	59339	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.179733992 CET	443	59339	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.685174942 CET	443	59337	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.685724020 CET	59337	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.685743093 CET	443	59337	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.686265945 CET	59337	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.686270952 CET	443	59337	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.819149971 CET	443	59337	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.820354939 CET	443	59337	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.820528984 CET	59337	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.820561886 CET	59337	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.820575953 CET	443	59337	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.820595026 CET	59337	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.820600033 CET	443	59337	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.826358080 CET	59340	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.826396942 CET	443	59340	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.826472998 CET	59340	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.826767921 CET	59340	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.826785088 CET	443	59340	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.923635006 CET	443	59338	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.924945116 CET	59338	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.924976110 CET	443	59338	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.926130056 CET	59338	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.926136017 CET	443	59338	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.926523924 CET	443	59339	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.927103996 CET	59339	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.927122116 CET	443	59339	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:51.928045034 CET	59339	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:51.928050041 CET	443	59339	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.056469917 CET	443	59338	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.056495905 CET	443	59338	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.056544065 CET	443	59338	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.056669950 CET	59338	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.056669950 CET	59338	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.057126045 CET	59338	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.057143927 CET	443	59338	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.057184935 CET	59338	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.057193041 CET	443	59338	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.061228991 CET	443	59339	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.061269045 CET	59341	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.061290026 CET	443	59339	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.061306953 CET	443	59341	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.061357975 CET	59339	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.061371088 CET	59341	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.061553001 CET	59339	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.061564922 CET	443	59339	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.062948942 CET	59341	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.062964916 CET	443	59341	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.065798044 CET	59342	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.065834045 CET	443	59342	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.065896988 CET	59342	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.066056967 CET	59342	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.066068888 CET	443	59342	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.555335999 CET	443	59340	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.555852890 CET	59340	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.555882931 CET	443	59340	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.556633949 CET	59340	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.556641102 CET	443	59340	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.686023951 CET	443	59340	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.686419010 CET	443	59340	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.686465979 CET	59340	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.686544895 CET	59340	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.686562061 CET	443	59340	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.686573029 CET	59340	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.686579943 CET	443	59340	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.689043045 CET	59343	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.689075947 CET	443	59343	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.689271927 CET	59343	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.689713955 CET	59343	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.689728022 CET	443	59343	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.756805897 CET	443	59336	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.757275105 CET	59336	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.757301092 CET	443	59336	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.757839918 CET	59336	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.757846117 CET	443	59336	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.793139935 CET	443	59341	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.793535948 CET	59341	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.793553114 CET	443	59341	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.794197083 CET	59341	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.794203043 CET	443	59341	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.804867029 CET	443	59342	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.805222988 CET	59342	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.805288076 CET	443	59342	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.805716991 CET	59342	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.805732012 CET	443	59342	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.894068003 CET	443	59336	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.894151926 CET	443	59336	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.894231081 CET	59336	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.894388914 CET	59336	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.894402027 CET	443	59336	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.894433975 CET	59336	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.894439936 CET	443	59336	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.897423029 CET	59344	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.897449970 CET	443	59344	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.897736073 CET	59344	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.897941113 CET	59344	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.897953987 CET	443	59344	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.923235893 CET	443	59341	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.923269033 CET	443	59341	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.923335075 CET	443	59341	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.923342943 CET	59341	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.923396111 CET	59341	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.923572063 CET	59341	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.923580885 CET	443	59341	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.923630953 CET	59341	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.923635006 CET	443	59341	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.925977945 CET	59345	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.926000118 CET	443	59345	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.926064014 CET	59345	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.926202059 CET	59345	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.926213026 CET	443	59345	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.937150955 CET	443	59342	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.937200069 CET	443	59342	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.937294960 CET	59342	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.937370062 CET	59342	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.937385082 CET	443	59342	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.937418938 CET	59342	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.937423944 CET	443	59342	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.939676046 CET	59346	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.939691067 CET	443	59346	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:52.939794064 CET	59346	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.939960003 CET	59346	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:52.939968109 CET	443	59346	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.433598042 CET	443	59343	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.434822083 CET	59343	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.434834003 CET	443	59343	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.435736895 CET	59343	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.435741901 CET	443	59343	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.566643000 CET	443	59343	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.566670895 CET	443	59343	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.566718102 CET	443	59343	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.566726923 CET	59343	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.566771984 CET	59343	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.567061901 CET	59343	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.567071915 CET	443	59343	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.570348978 CET	59347	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.570362091 CET	443	59347	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.570470095 CET	59347	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.570674896 CET	59347	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.570687056 CET	443	59347	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.641957045 CET	443	59344	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.667222023 CET	59344	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.667244911 CET	443	59344	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.668757915 CET	59344	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.668762922 CET	443	59344	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.682939053 CET	443	59346	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.683516026 CET	59346	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.683526993 CET	443	59346	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.692106962 CET	443	59345	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.704746962 CET	59346	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.704751968 CET	443	59346	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.709357023 CET	59345	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.709371090 CET	443	59345	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.709875107 CET	59345	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.709880114 CET	443	59345	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.770220995 CET	443	59291	172.217.18.4	192.168.2.4
Oct 28, 2024 14:26:53.770267963 CET	443	59291	172.217.18.4	192.168.2.4
Oct 28, 2024 14:26:53.770416021 CET	59291	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:26:53.830713034 CET	443	59346	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.830867052 CET	443	59346	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.830931902 CET	59346	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.831322908 CET	59346	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.831322908 CET	59346	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.831334114 CET	443	59346	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.831342936 CET	443	59346	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.836306095 CET	59348	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.836338997 CET	443	59348	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.836498022 CET	59348	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.836837053 CET	59348	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.836849928 CET	443	59348	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.861681938 CET	443	59345	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.861706972 CET	443	59345	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.861759901 CET	443	59345	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.861778975 CET	59345	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.861799955 CET	59345	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.861912012 CET	59345	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.861912012 CET	59345	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.861926079 CET	443	59345	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.861931086 CET	443	59345	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.865052938 CET	59349	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.865139008 CET	443	59349	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:53.865212917 CET	59349	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.865358114 CET	59349	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:53.865395069 CET	443	59349	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.340193033 CET	443	59347	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.340775013 CET	59347	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.340786934 CET	443	59347	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.341506958 CET	59347	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.341511011 CET	443	59347	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.356293917 CET	443	59344	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.356688976 CET	443	59344	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.356893063 CET	59344	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.357629061 CET	59344	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.357629061 CET	59344	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.357646942 CET	443	59344	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.357655048 CET	443	59344	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.360521078 CET	59350	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.360569954 CET	443	59350	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.360685110 CET	59350	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.360852957 CET	59350	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.360879898 CET	443	59350	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.475791931 CET	443	59347	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.476246119 CET	443	59347	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.476303101 CET	443	59347	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.476301908 CET	59347	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.476358891 CET	59347	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.476805925 CET	59347	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.476821899 CET	443	59347	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.486310959 CET	59351	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.486398935 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.486481905 CET	59351	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.486721039 CET	59351	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.486757040 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.592880011 CET	443	59348	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.593363047 CET	59348	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.593388081 CET	443	59348	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.593853951 CET	59348	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.593858957 CET	443	59348	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.611332893 CET	443	59349	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.611707926 CET	59349	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.611759901 CET	443	59349	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.612086058 CET	59349	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.612102032 CET	443	59349	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.726311922 CET	443	59348	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.726516008 CET	443	59348	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.726655006 CET	59348	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.726697922 CET	59348	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.726697922 CET	59348	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.726715088 CET	443	59348	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.726723909 CET	443	59348	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.729501963 CET	59352	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.729540110 CET	443	59352	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.729621887 CET	59352	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.729763031 CET	59352	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.729778051 CET	443	59352	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.743437052 CET	443	59349	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.743509054 CET	443	59349	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.743587971 CET	59349	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.743725061 CET	59349	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.743725061 CET	59349	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.743772984 CET	443	59349	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.743799925 CET	443	59349	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.745784998 CET	59353	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.745834112 CET	443	59353	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:54.745978117 CET	59353	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.746165037 CET	59353	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:54.746176958 CET	443	59353	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.116974115 CET	443	59350	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.117501974 CET	59350	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.117517948 CET	443	59350	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.118125916 CET	59350	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.118132114 CET	443	59350	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.231867075 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.232314110 CET	59351	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.232377052 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.232863903 CET	59351	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.232878923 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.247411966 CET	443	59350	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.248070955 CET	443	59350	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.248136997 CET	59350	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.248167038 CET	59350	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.248179913 CET	443	59350	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.248188972 CET	59350	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.248194933 CET	443	59350	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.251079082 CET	59354	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.251111031 CET	443	59354	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.251195908 CET	59354	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.251337051 CET	59354	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.251353025 CET	443	59354	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.359950066 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.360022068 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.360101938 CET	59351	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.360127926 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.360158920 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.360230923 CET	59351	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.360325098 CET	59351	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.360361099 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.360388994 CET	59351	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.360404015 CET	443	59351	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.363094091 CET	59355	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.363130093 CET	443	59355	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.363337040 CET	59355	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.363441944 CET	59355	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.363454103 CET	443	59355	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.444133997 CET	59291	443	192.168.2.4	172.217.18.4
Oct 28, 2024 14:26:55.444156885 CET	443	59291	172.217.18.4	192.168.2.4
Oct 28, 2024 14:26:55.481764078 CET	443	59353	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.482305050 CET	59353	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.482331038 CET	443	59353	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.482803106 CET	59353	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.482812881 CET	443	59353	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.510545015 CET	443	59352	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.511023045 CET	59352	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.511050940 CET	443	59352	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.511734009 CET	59352	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.511740923 CET	443	59352	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.614115953 CET	443	59353	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.614144087 CET	443	59353	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.614191055 CET	443	59353	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.614301920 CET	59353	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.614460945 CET	59353	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.614597082 CET	59353	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.614597082 CET	59353	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.614624023 CET	443	59353	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.614638090 CET	443	59353	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.617440939 CET	59356	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.617516041 CET	443	59356	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.617738008 CET	59356	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.617738962 CET	59356	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.617815018 CET	443	59356	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.646991968 CET	443	59352	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.647126913 CET	443	59352	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.647254944 CET	59352	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.647254944 CET	59352	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.647254944 CET	59352	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.649629116 CET	59357	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.649686098 CET	443	59357	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.649846077 CET	59357	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.649846077 CET	59357	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.649872065 CET	443	59357	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:55.957885027 CET	59352	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:55.957921982 CET	443	59352	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.007453918 CET	443	59354	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.008538008 CET	59354	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.008538008 CET	59354	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.008569002 CET	443	59354	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.008584023 CET	443	59354	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.127815008 CET	443	59355	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.128355980 CET	59355	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.128386974 CET	443	59355	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.128782034 CET	59355	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.128791094 CET	443	59355	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.147722006 CET	443	59354	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.147789955 CET	443	59354	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.148025990 CET	59354	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.148025990 CET	59354	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.148111105 CET	59354	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.148129940 CET	443	59354	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.150743961 CET	59358	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.150830984 CET	443	59358	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.150998116 CET	59358	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.151061058 CET	59358	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.151081085 CET	443	59358	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.259305954 CET	443	59355	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.259491920 CET	443	59355	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.259598017 CET	59355	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.259598017 CET	59355	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.259799957 CET	59355	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.259814978 CET	443	59355	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.262228012 CET	59359	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.262255907 CET	443	59359	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.262437105 CET	59359	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.262526035 CET	59359	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.262535095 CET	443	59359	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.396564007 CET	443	59356	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.396976948 CET	59356	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.397011042 CET	443	59356	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.397578955 CET	59356	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.397593021 CET	443	59356	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.401777983 CET	443	59357	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.402631998 CET	59357	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.402631998 CET	59357	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.402656078 CET	443	59357	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.402663946 CET	443	59357	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.533535004 CET	443	59357	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.533608913 CET	443	59357	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.533710957 CET	443	59357	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.533885002 CET	59357	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.533885956 CET	59357	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.533943892 CET	59357	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.533960104 CET	443	59357	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.537009001 CET	443	59356	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.537030935 CET	59360	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.537066936 CET	443	59360	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.537075043 CET	443	59356	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.537224054 CET	59356	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.537252903 CET	59360	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.537460089 CET	59356	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.537461042 CET	59360	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.537475109 CET	443	59360	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.537492037 CET	443	59356	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.537529945 CET	59356	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.537548065 CET	443	59356	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.539501905 CET	59361	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.539546013 CET	443	59361	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.539704084 CET	59361	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.539767027 CET	59361	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.539777040 CET	443	59361	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.884798050 CET	443	59358	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.885324001 CET	59358	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.885385990 CET	443	59358	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.885946035 CET	59358	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.885960102 CET	443	59358	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.997216940 CET	443	59359	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.997603893 CET	59359	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.997617006 CET	443	59359	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:56.997984886 CET	59359	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:56.997988939 CET	443	59359	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.015948057 CET	443	59358	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.016114950 CET	443	59358	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.016232967 CET	59358	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.016290903 CET	59358	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.016290903 CET	59358	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.016328096 CET	443	59358	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.016351938 CET	443	59358	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.019054890 CET	59362	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.019078970 CET	443	59362	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.019256115 CET	59362	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.019377947 CET	59362	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.019392014 CET	443	59362	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.129318953 CET	443	59359	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.129348993 CET	443	59359	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.129406929 CET	443	59359	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.129419088 CET	59359	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.129443884 CET	59359	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.129785061 CET	59359	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.129805088 CET	443	59359	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.129816055 CET	59359	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.129822969 CET	443	59359	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.132987022 CET	59363	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.133080006 CET	443	59363	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.133173943 CET	59363	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.133320093 CET	59363	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.133348942 CET	443	59363	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.274410009 CET	443	59360	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.274903059 CET	59360	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.274914980 CET	443	59360	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.275481939 CET	59360	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.275487900 CET	443	59360	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.289153099 CET	443	59361	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.289551973 CET	59361	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.289572001 CET	443	59361	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.290102959 CET	59361	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.290110111 CET	443	59361	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.405774117 CET	443	59360	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.405848980 CET	443	59360	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.405957937 CET	59360	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.406047106 CET	59360	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.406056881 CET	443	59360	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.408844948 CET	59364	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.408883095 CET	443	59364	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.409008026 CET	59364	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.409142971 CET	59364	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.409159899 CET	443	59364	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.419389009 CET	443	59361	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.419641972 CET	443	59361	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.419766903 CET	59361	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.419807911 CET	59361	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.419830084 CET	443	59361	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.419843912 CET	59361	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.419852018 CET	443	59361	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.422266006 CET	59365	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.422339916 CET	443	59365	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.422411919 CET	59365	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.422513962 CET	59365	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.422549009 CET	443	59365	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.756099939 CET	443	59362	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.756520033 CET	59362	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.756531954 CET	443	59362	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.756954908 CET	59362	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.756961107 CET	443	59362	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.871129990 CET	443	59363	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.872251987 CET	59363	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.872251987 CET	59363	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.872272968 CET	443	59363	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.872291088 CET	443	59363	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.893162966 CET	443	59362	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.893326998 CET	443	59362	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.893402100 CET	59362	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.893611908 CET	59362	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.893619061 CET	443	59362	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.893662930 CET	59362	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.893668890 CET	443	59362	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.896483898 CET	59366	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.896523952 CET	443	59366	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:57.896636009 CET	59366	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.896835089 CET	59366	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:57.896851063 CET	443	59366	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.005079031 CET	443	59363	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.005189896 CET	443	59363	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.005389929 CET	59363	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.005389929 CET	59363	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.005389929 CET	59363	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.007986069 CET	59367	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.008024931 CET	443	59367	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.008285046 CET	59367	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.008358955 CET	59367	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.008368015 CET	443	59367	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.130930901 CET	443	59364	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.131472111 CET	59364	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.131484032 CET	443	59364	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.131998062 CET	59364	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.132004023 CET	443	59364	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.157438993 CET	443	59365	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.157918930 CET	59365	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.157936096 CET	443	59365	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.158366919 CET	59365	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.158375978 CET	443	59365	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.264256954 CET	443	59364	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.264338017 CET	443	59364	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.265639067 CET	59364	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.265639067 CET	59364	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.265779972 CET	59364	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.265790939 CET	443	59364	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.269757032 CET	59368	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.269793987 CET	443	59368	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.269963026 CET	59368	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.270275116 CET	59368	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.270292044 CET	443	59368	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.286145926 CET	443	59365	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.287169933 CET	443	59365	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.287286997 CET	59365	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.287370920 CET	59365	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.287370920 CET	59365	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.287405968 CET	443	59365	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.287431002 CET	443	59365	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.290189028 CET	59369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.290235043 CET	443	59369	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.290446997 CET	59369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.290523052 CET	59369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.290533066 CET	443	59369	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.317012072 CET	59363	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.317049026 CET	443	59363	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.638410091 CET	443	59366	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.638957977 CET	59366	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.638969898 CET	443	59366	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.639600039 CET	59366	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.639605045 CET	443	59366	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.755059958 CET	443	59367	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.755642891 CET	59367	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.755687952 CET	443	59367	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.756174088 CET	59367	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.756181002 CET	443	59367	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.772110939 CET	443	59366	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.772188902 CET	443	59366	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.772401094 CET	59366	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.772401094 CET	59366	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.772609949 CET	59366	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.772622108 CET	443	59366	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.775278091 CET	59370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.775321007 CET	443	59370	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.775485039 CET	59370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.775588036 CET	59370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.775605917 CET	443	59370	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.897671938 CET	443	59367	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.897699118 CET	443	59367	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.897737026 CET	443	59367	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.897778988 CET	59367	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.898072004 CET	59367	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.898072004 CET	59367	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.898591042 CET	59367	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.898623943 CET	443	59367	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.901184082 CET	59371	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.901223898 CET	443	59371	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:58.901460886 CET	59371	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.901695967 CET	59371	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:58.901710033 CET	443	59371	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.006501913 CET	443	59368	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.007646084 CET	59368	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.007647038 CET	59368	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.007663012 CET	443	59368	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.007678032 CET	443	59368	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.054677010 CET	443	59369	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.055704117 CET	59369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.055716991 CET	443	59369	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.056121111 CET	59369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.056143999 CET	443	59369	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.136730909 CET	443	59368	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.136806011 CET	443	59368	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.136903048 CET	59368	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.136950970 CET	59368	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.137056112 CET	59368	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.137056112 CET	59368	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.137073994 CET	443	59368	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.137084961 CET	443	59368	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.140161991 CET	59372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.140237093 CET	443	59372	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.140481949 CET	59372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.140882015 CET	59372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.140916109 CET	443	59372	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.189234972 CET	443	59369	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.189300060 CET	443	59369	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.189522028 CET	59369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.189807892 CET	59369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.189807892 CET	59369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.189831018 CET	443	59369	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.189843893 CET	443	59369	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.193221092 CET	59373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.193249941 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.193324089 CET	59373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.193588018 CET	59373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.193600893 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.508897066 CET	443	59370	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.509403944 CET	59370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.509426117 CET	443	59370	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.510055065 CET	59370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.510062933 CET	443	59370	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.619977951 CET	443	59371	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.620644093 CET	59371	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.620657921 CET	443	59371	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.621217012 CET	59371	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.621227026 CET	443	59371	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.642682076 CET	443	59370	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.642847061 CET	443	59370	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.642920017 CET	59370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.643054008 CET	59370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.643079996 CET	443	59370	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.643093109 CET	59370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.643104076 CET	443	59370	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.645853996 CET	59374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.645921946 CET	443	59374	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.646008968 CET	59374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.646135092 CET	59374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.646162033 CET	443	59374	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.755815029 CET	443	59371	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.755834103 CET	443	59371	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.755882025 CET	443	59371	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.755898952 CET	59371	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.755963087 CET	59371	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.756156921 CET	59371	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.756156921 CET	59371	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.756171942 CET	443	59371	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.756181955 CET	443	59371	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.758806944 CET	59375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.758835077 CET	443	59375	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.758985043 CET	59375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.759146929 CET	59375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.759160995 CET	443	59375	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.916331053 CET	443	59372	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.916999102 CET	59372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.917045116 CET	443	59372	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.917699099 CET	59372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.917716026 CET	443	59372	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.932130098 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.932518959 CET	59373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.932533026 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:26:59.932950974 CET	59373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:26:59.932957888 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.051882982 CET	443	59372	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.052014112 CET	443	59372	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.052069902 CET	443	59372	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.052073002 CET	59372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.052131891 CET	59372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.052395105 CET	59372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.052434921 CET	443	59372	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.052449942 CET	59372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.052464962 CET	443	59372	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.056118011 CET	59376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.056159019 CET	443	59376	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.056225061 CET	59376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.056375980 CET	59376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.056389093 CET	443	59376	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.065857887 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.065906048 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.065979004 CET	59373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.065994024 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.066059113 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.066135883 CET	59373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.066159010 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.066174030 CET	59373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.066174030 CET	59373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.066180944 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.066190958 CET	443	59373	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.069647074 CET	59377	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.069683075 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.069756031 CET	59377	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.069971085 CET	59377	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.069987059 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.372010946 CET	443	59374	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.372505903 CET	59374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.372575998 CET	443	59374	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.373687029 CET	59374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.373702049 CET	443	59374	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.499955893 CET	443	59374	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.500292063 CET	443	59374	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.500348091 CET	59374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.500464916 CET	59374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.500464916 CET	59374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.500502110 CET	443	59374	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.500525951 CET	443	59374	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.500627041 CET	443	59375	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.501226902 CET	59375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.501247883 CET	443	59375	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.501888990 CET	59375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.501893997 CET	443	59375	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.504929066 CET	59378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.504966021 CET	443	59378	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.505162954 CET	59378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.505162954 CET	59378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.505198002 CET	443	59378	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.636023045 CET	443	59375	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.636049032 CET	443	59375	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.636110067 CET	443	59375	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.636209965 CET	59375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.636373997 CET	59375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.636373997 CET	59375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.636393070 CET	443	59375	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.636430979 CET	59375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.636437893 CET	443	59375	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.639684916 CET	59379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.639728069 CET	443	59379	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.639812946 CET	59379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.639962912 CET	59379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.639981031 CET	443	59379	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.799834013 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.800594091 CET	59377	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.800607920 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.801068068 CET	59377	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.801074028 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.801536083 CET	443	59376	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.802192926 CET	59376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.802206039 CET	443	59376	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.803145885 CET	59376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.803157091 CET	443	59376	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.929907084 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.929965019 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.930102110 CET	59377	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.930114985 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.930145025 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.930294037 CET	59377	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.930382967 CET	59377	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.930382967 CET	59377	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.930411100 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.930417061 CET	443	59377	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.933461905 CET	59380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.933506012 CET	443	59380	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.933574915 CET	59380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.933816910 CET	59380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.933828115 CET	443	59380	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.934891939 CET	443	59376	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.935069084 CET	443	59376	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.935179949 CET	59376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.935179949 CET	59376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.935209036 CET	59376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.935229063 CET	443	59376	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.937604904 CET	59381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.937654018 CET	443	59381	13.107.246.45	192.168.2.4
Oct 28, 2024 14:27:00.937952042 CET	59381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.937952042 CET	59381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 14:27:00.937995911 CET	443	59381	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 14:25:39.210494041 CET	53	63239	1.1.1.1	192.168.2.4
Oct 28, 2024 14:25:39.240685940 CET	53	57620	1.1.1.1	192.168.2.4
Oct 28, 2024 14:25:40.468067884 CET	53	58961	1.1.1.1	192.168.2.4
Oct 28, 2024 14:25:41.162264109 CET	52236	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:41.164824009 CET	64780	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:42.849062920 CET	64747	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:42.849443913 CET	58519	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:42.857145071 CET	53	64747	1.1.1.1	192.168.2.4
Oct 28, 2024 14:25:42.857465982 CET	53	58519	1.1.1.1	192.168.2.4
Oct 28, 2024 14:25:44.712641001 CET	51456	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:44.712801933 CET	64837	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:46.442780972 CET	63589	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:46.443501949 CET	58654	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:51.932925940 CET	138	138	192.168.2.4	192.168.2.255
Oct 28, 2024 14:25:52.555953026 CET	62272	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:52.556087017 CET	62344	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:52.564503908 CET	53	59319	1.1.1.1	192.168.2.4
Oct 28, 2024 14:25:55.455775023 CET	53670	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:55.456361055 CET	55959	53	192.168.2.4	1.1.1.1
Oct 28, 2024 14:25:57.884799004 CET	53	49564	1.1.1.1	192.168.2.4
Oct 28, 2024 14:26:16.957014084 CET	53	53683	1.1.1.1	192.168.2.4
Oct 28, 2024 14:26:22.029028893 CET	53	50005	1.1.1.1	192.168.2.4
Oct 28, 2024 14:26:38.664448023 CET	53	53882	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 14:25:41.162264109 CET	192.168.2.4	1.1.1.1	0x7ec4	Standard query (0)	wentworth.az1.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:25:41.164824009 CET	192.168.2.4	1.1.1.1	0x80eb	Standard query (0)	wentworth.az1.qualtrics.com	65	IN (0x0001)	false
Oct 28, 2024 14:25:42.849062920 CET	192.168.2.4	1.1.1.1	0xb293	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:25:42.849443913 CET	192.168.2.4	1.1.1.1	0x7194	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 28, 2024 14:25:44.712641001 CET	192.168.2.4	1.1.1.1	0xc6c4	Standard query (0)	eu.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:25:44.712801933 CET	192.168.2.4	1.1.1.1	0xd345	Standard query (0)	eu.qualtrics.com	65	IN (0x0001)	false
Oct 28, 2024 14:25:46.442780972 CET	192.168.2.4	1.1.1.1	0x66e0	Standard query (0)	wentworth.az1.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:25:46.443501949 CET	192.168.2.4	1.1.1.1	0x28c6	Standard query (0)	wentworth.az1.qualtrics.com	65	IN (0x0001)	false
Oct 28, 2024 14:25:52.555953026 CET	192.168.2.4	1.1.1.1	0xd021	Standard query (0)	qualtricsxmhgpw8frtb.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:25:52.556087017 CET	192.168.2.4	1.1.1.1	0xde63	Standard query (0)	qualtricsxmhgpw8frtb.qualtrics.com	65	IN (0x0001)	false
Oct 28, 2024 14:25:55.455775023 CET	192.168.2.4	1.1.1.1	0xd017	Standard query (0)	qualtricsxmhgpw8frtb.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:25:55.456361055 CET	192.168.2.4	1.1.1.1	0x4a39	Standard query (0)	qualtricsxmhgpw8frtb.qualtrics.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 14:25:41.175029993 CET	1.1.1.1	192.168.2.4	0x7ec4	No error (0)	wentworth.az1.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:25:41.183080912 CET	1.1.1.1	192.168.2.4	0x80eb	No error (0)	wentworth.az1.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:25:42.857145071 CET	1.1.1.1	192.168.2.4	0xb293	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:25:42.857465982 CET	1.1.1.1	192.168.2.4	0x7194	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 28, 2024 14:25:44.720403910 CET	1.1.1.1	192.168.2.4	0xd345	No error (0)	eu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:25:44.722397089 CET	1.1.1.1	192.168.2.4	0xc6c4	No error (0)	eu.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:25:46.466234922 CET	1.1.1.1	192.168.2.4	0x28c6	No error (0)	wentworth.az1.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:25:46.466522932 CET	1.1.1.1	192.168.2.4	0x66e0	No error (0)	wentworth.az1.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:25:50.596390963 CET	1.1.1.1	192.168.2.4	0x9bba	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:25:50.596390963 CET	1.1.1.1	192.168.2.4	0x9bba	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:25:52.568253040 CET	1.1.1.1	192.168.2.4	0xd021	No error (0)	qualtricsxmhgpw8frtb.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:25:52.581017017 CET	1.1.1.1	192.168.2.4	0xde63	No error (0)	qualtricsxmhgpw8frtb.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:25:52.816912889 CET	1.1.1.1	192.168.2.4	0xcd10	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:25:52.816912889 CET	1.1.1.1	192.168.2.4	0xcd10	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:25:55.474355936 CET	1.1.1.1	192.168.2.4	0x4a39	No error (0)	qualtricsxmhgpw8frtb.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:25:55.481151104 CET	1.1.1.1	192.168.2.4	0xd017	No error (0)	qualtricsxmhgpw8frtb.qualtrics.com	cloudenhanced.qualtrics.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:26:05.247112036 CET	1.1.1.1	192.168.2.4	0x6959	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:26:05.247112036 CET	1.1.1.1	192.168.2.4	0x6959	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:26:28.038259029 CET	1.1.1.1	192.168.2.4	0x4eb4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:26:28.038259029 CET	1.1.1.1	192.168.2.4	0x4eb4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 14:26:52.183931112 CET	1.1.1.1	192.168.2.4	0xba3c	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:26:52.183931112 CET	1.1.1.1	192.168.2.4	0xba3c	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 14:26:52.183931112 CET	1.1.1.1	192.168.2.4	0xba3c	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:25:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 13:25:45 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=170943 Date: Mon, 28 Oct 2024 13:25:45 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:25:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 13:25:46 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=170996 Date: Mon, 28 Oct 2024 13:25:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-28 13:25:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.4	59216	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:28 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:29 UTC	561	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:28 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 27 Oct 2024 10:35:44 GMT ETag: "0x8DCF6731CF80310" x-ms-request-id: 89d6c6b8-201e-0033-2798-28b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132628Z-15b8d89586fcvr6p5956n5d0rc0000000awg000000009wap x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:29 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-28 13:26:29 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-28 13:26:29 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-28 13:26:29 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-28 13:26:29 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-28 13:26:29 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-28 13:26:29 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-28 13:26:29 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-28 13:26:29 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-28 13:26:29 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	59217	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:30 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:30 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:30 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132630Z-16849878b78bcpfn2qf7sm6hsn00000006r000000000actx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:30 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	59218	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:30 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:30 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132630Z-15b8d89586fhl2qtatrz3vfkf00000000b30000000005v75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:30 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	59219	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:30 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:30 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: c4f51330-801e-008f-50f6-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132630Z-15b8d89586fqj7k5h9gbd8vs98000000064000000000dbg5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:30 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	59221	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:30 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:30 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132630Z-16849878b78x6gn56mgecg60qc00000006u000000000kkbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:30 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	59220	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:30 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:30 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:30 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132630Z-16849878b78z2wx67pvzz63kdg00000003qg00000000bqwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:30 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	59224	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:31 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:31 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:31 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132631Z-16849878b787wpl5wqkt5731b400000005v000000000bm6c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:31 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	59225	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:31 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:31 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132631Z-16849878b78z2wx67pvzz63kdg00000003r000000000anru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:31 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	59223	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:31 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:31 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:31 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132631Z-16849878b78p49s6zkwt11bbkn00000004sg00000000amg3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:31 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	59226	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:31 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:31 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132631Z-16849878b78g2m84h2v9sta290000000040g00000000b1e8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:31 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	59227	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:31 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:31 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bebabdad-901e-0029-5d45-28274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132631Z-r197bdfb6b4d9xksru4x6qbqr0000000052000000000766v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:31 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	59230	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:32 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:32 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132632Z-16849878b78q9m8bqvwuva4svc00000003qg000000003hwr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	59228	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:32 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132632Z-16849878b787wpl5wqkt5731b400000005wg000000007q5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	59229	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:32 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:32 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9985b9b7-a01e-0021-5827-28814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132632Z-15b8d89586f42m673h1quuee4s0000000960000000005f6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	59231	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:32 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: abb1733e-f01e-005d-6a3c-2813ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132632Z-15b8d89586fhl2qtatrz3vfkf00000000b40000000004f9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	59232	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:32 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132632Z-16849878b78q9m8bqvwuva4svc00000003gg00000000n22h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	59233	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:33 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:33 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 9426c385-b01e-0053-505f-27cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132633Z-17c5cb586f6hn8cl90dxzu28kw00000004wg000000008t11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:33 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	59234	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:33 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132633Z-16849878b78fkwcjkpn19c5dsn000000041000000000gw1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	59236	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:33 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:33 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:33 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132633Z-16849878b78j7llf5vkyvvcehs000000065000000000c64s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:33 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	59235	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:33 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:33 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132633Z-16849878b78z2wx67pvzz63kdg00000003mg00000000hatk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	59237	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:33 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:33 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 389e5e1f-601e-000d-2325-282618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132633Z-17c5cb586f626sn8grcgm1gf8000000003p00000000027q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	59238	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:33 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:34 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132633Z-15b8d89586ff5l62aha9080wv000000006b0000000007fry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	59239	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:33 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:34 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132633Z-16849878b7867ttgfbpnfxt44s00000004x000000000fmdu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	59240	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:33 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:34 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:34 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132634Z-17c5cb586f626sn8grcgm1gf8000000003mg00000000542f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:34 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	59242	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:34 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:34 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ef4969e5-401e-002a-2c3c-28c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132634Z-15b8d89586f989rkfw99rwd68g00000006c00000000049d8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:34 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	59243	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:34 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:34 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132634Z-16849878b786jv8w2kpaf5zkqs0000000410000000005qq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:34 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	59244	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:34 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132634Z-16849878b78smng4k6nq15r6s400000006m000000000cxxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	59245	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:34 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:34 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132634Z-16849878b7867ttgfbpnfxt44s00000004vg00000000m07r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	59246	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:34 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132634Z-16849878b78z2wx67pvzz63kdg00000003kg00000000kuvn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	59247	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:35 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132635Z-16849878b7867ttgfbpnfxt44s00000004wg00000000g5sd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	59248	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:35 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:35 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8e3eac93-d01e-0017-759c-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132635Z-15b8d89586fx2hlt035xdehq580000000p200000000003pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:35 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	59249	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:35 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 759c8b5d-301e-003f-27f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132635Z-15b8d89586frzkk2umu6w8qnt80000000nhg000000006xc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	59241	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:35 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132635Z-16849878b78wv88bk51myq5vxc00000005eg00000000370y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	59250	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:35 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 488bf4d4-001e-00a2-2656-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132635Z-17c5cb586f6hn8cl90dxzu28kw00000004x0000000008dek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	59251	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:36 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: cd3f31c5-e01e-0033-6a5a-274695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132636Z-17c5cb586f6hn8cl90dxzu28kw00000004w0000000009x2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	59252	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:36 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:36 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132636Z-16849878b78qg9mlz11wgn0wcc00000004s0000000003wkk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:36 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	59253	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:36 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:36 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132636Z-16849878b78hh85qc40uyr8sc800000005d0000000008ake x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:36 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	59254	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:36 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:36 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 5e2f3c3f-901e-0048-1b49-28b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132636Z-r197bdfb6b4skzzvqpzzd3xetg00000004fg000000005gw7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:36 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	59255	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:36 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132636Z-16849878b78hh85qc40uyr8sc800000005f00000000012mm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	59258	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:37 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:37 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: b59cacea-101e-000b-76f2-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132637Z-15b8d89586fx2hlt035xdehq580000000p2g000000000105 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:37 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	59257	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:37 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 4900665d-501e-0029-5111-29d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132637Z-15b8d89586frzkk2umu6w8qnt80000000nm00000000066fr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:37 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	59259	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:37 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:37 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f826faa8-301e-0099-1457-266683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132637Z-r197bdfb6b4grkz4xgvkar0zcs00000004sg000000000aeq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:37 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	59260	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:37 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:37 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 84cbfce0-201e-0071-26f6-26ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132637Z-17c5cb586f66g7mvbfuqdb2m3n000000058g000000002vb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:37 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	59262	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:38 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:38 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132638Z-16849878b78hh85qc40uyr8sc800000005d0000000008apw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:38 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	59261	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:38 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:38 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132638Z-16849878b78qf2gleqhwczd21s000000059000000000cktq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:38 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	59263	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:38 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:38 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132638Z-16849878b78qfbkc5yywmsbg0c00000004tg0000000093x1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	59256	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:38 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:38 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5aa9a52-501e-0064-116a-271f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132638Z-17c5cb586f69w69mgazyf263an00000004ag000000000auq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:38 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	59264	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:38 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3802ff33-701e-0001-4310-28b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132638Z-r197bdfb6b4qbfppwgs4nqza8000000003q0000000007gh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	59265	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:39 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:39 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132639Z-16849878b785dznd7xpawq9gcn00000006g00000000098x1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:39 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	59266	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:39 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132639Z-16849878b782d4lwcu6h6gmxnw00000004t000000000avak x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	59267	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:39 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:39 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132639Z-16849878b786lft2mu9uftf3y4000000069000000000fwks x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:39 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	59268	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:39 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132639Z-16849878b78qfbkc5yywmsbg0c00000004v0000000003w9b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	59270	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:39 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:39 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132639Z-16849878b787wpl5wqkt5731b400000005vg00000000a7bg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:39 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	59272	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:40 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: cb951b4e-f01e-0020-727f-28956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132640Z-17c5cb586f64v7xs992vpxwchg000000053000000000771n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	59271	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:40 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132640Z-16849878b78z2wx67pvzz63kdg00000003mg00000000hbfn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	59273	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:40 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fbbf15bf-401e-0015-226f-280e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132640Z-r197bdfb6b48pcqqxhenwd2uz800000005vg000000006pfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	59274	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:40 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:40 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132640Z-16849878b78x6gn56mgecg60qc0000000700000000000q2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:40 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	59275	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:40 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:40 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 923d4e42-a01e-003d-2e31-2798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132640Z-r197bdfb6b4bs5qf58wn14wgm0000000040000000000aazh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:40 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	59277	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:41 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ea1c795e-c01e-0014-1efa-27a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132641Z-17c5cb586f6g6g2sbe6edp75y4000000079g000000000pu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	59276	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:41 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:41 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132641Z-16849878b78g2m84h2v9sta29000000003wg00000000mq9c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:41 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	59278	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:41 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:41 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132641Z-16849878b78qg9mlz11wgn0wcc00000004kg00000000h2ar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:41 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	59279	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:41 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:41 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132641Z-16849878b782d4lwcu6h6gmxnw00000004u00000000077q9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:41 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	59280	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:41 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:41 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5ef35a72-501e-007b-6836-285ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132641Z-15b8d89586fvk4kmbg8pf84y88000000063000000000117a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:41 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	59282	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:41 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:42 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ad4459d7-101e-007a-6a4c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132642Z-16849878b78sx229w7g7at4nkg000000036g00000000nxb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:42 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	59281	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:41 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:41 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132641Z-16849878b78fkwcjkpn19c5dsn00000004500000000078xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:42 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	59284	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:41 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:42 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132642Z-16849878b78xblwksrnkakc08w00000004c0000000008fg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	59283	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:41 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:42 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132642Z-16849878b78sx229w7g7at4nkg000000038g00000000fh6r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:42 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	59285	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:42 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:42 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132642Z-16849878b78wv88bk51myq5vxc000000059g00000000g3ns x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:42 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	59286	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:42 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:43 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132642Z-16849878b78fhxrnedubv5byks00000003a000000000hnfc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:43 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	59287	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:42 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132642Z-16849878b78qfbkc5yywmsbg0c00000004ng00000000mh6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	59288	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:42 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:42 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132642Z-15b8d89586fmhkw429ba5n22m800000006h0000000002yce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:42 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	59289	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:42 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132642Z-15b8d89586fsx9lfqmgrbzpgmg0000000p3000000000018d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	59290	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:43 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132643Z-16849878b78bcpfn2qf7sm6hsn00000006tg000000001cwf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	59292	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:43 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:43 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: bd3356e8-b01e-0002-6afb-241b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132643Z-15b8d89586fcvr6p5956n5d0rc0000000avg00000000bpzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:43 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	59294	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:43 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:43 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 071448c9-d01e-0028-2702-297896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132643Z-15b8d89586fqj7k5h9gbd8vs98000000067g0000000083vv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:43 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	59293	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:43 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:43 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af2b1dc9-001e-0066-0d6c-27561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132643Z-16849878b78g2m84h2v9sta29000000004200000000062vp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:43 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	59295	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:43 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:44 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:43 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132643Z-16849878b786lft2mu9uftf3y4000000069g00000000f8cp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:44 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	59296	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:44 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:44 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132644Z-16849878b78g2m84h2v9sta2900000000410000000009paf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:44 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	59297	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:44 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:44 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132644Z-16849878b78wv88bk51myq5vxc00000005bg00000000bz4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:44 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	59299	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:44 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:44 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:44 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c317859a-501e-00a3-19db-27c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132644Z-r197bdfb6b4gx6v9pg74w9f47s00000006x00000000073ea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:44 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	59298	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:44 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:44 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:44 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: a9172f65-e01e-0020-698c-27de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132644Z-17c5cb586f626sn8grcgm1gf8000000003gg000000009pcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:44 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	59300	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:44 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:44 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:44 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 9c2fdade-c01e-002b-16f2-246e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132644Z-15b8d89586f5s5nz3ffrgxn5ac00000005qg000000007gs5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:44 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	59301	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:44 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:44 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:44 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132644Z-16849878b787bfsh7zgp804my400000003xg000000007nh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:44 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	59303	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:45 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:45 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:45 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132645Z-16849878b78j5kdg3dndgqw0vg00000006pg00000000np13 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:45 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	59302	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:45 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:45 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:45 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 522c145c-c01e-0066-0c1f-28a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132645Z-17c5cb586f6z6tw6g7cmdv30m800000006ag000000002fh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:45 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	59304	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:45 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:45 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:45 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 33ffbe2f-201e-0085-3800-2534e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132645Z-15b8d89586ff5l62aha9080wv0000000069000000000a2vd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:45 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	59305	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:45 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:45 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:45 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132645Z-16849878b78x6gn56mgecg60qc00000006w000000000cw5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:45 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	59306	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:45 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:45 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:45 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e6296ddc-301e-0052-0828-2665d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132645Z-17c5cb586f6r59nt869u8w8xt800000003zg00000000a8vk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:45 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	59307	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:46 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:46 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:46 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 6795109f-a01e-00ab-085e-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132646Z-r197bdfb6b48pcqqxhenwd2uz800000005wg000000004uqp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:46 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	59308	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:46 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:46 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132646Z-16849878b785dznd7xpawq9gcn00000006h0000000006kq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:46 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	59309	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:46 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:46 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132646Z-16849878b786jv8w2kpaf5zkqs00000003xg00000000g1uy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:46 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	59310	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:46 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:46 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 3010d1a1-b01e-0021-3bd5-25cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132646Z-15b8d89586f8nxpt6ys645x5v00000000690000000007070 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:46 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	59311	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:46 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:46 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:46 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132646Z-16849878b78zqkvcwgr6h55x9n00000004gg00000000cu71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:46 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	59312	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:47 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:47 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:47 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132647Z-16849878b78z2wx67pvzz63kdg00000003m000000000kk0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:47 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	59313	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:47 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:47 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:47 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132647Z-16849878b78smng4k6nq15r6s400000006qg000000001mef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:47 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	59314	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:47 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:47 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:47 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132647Z-16849878b78qg9mlz11wgn0wcc00000004sg000000001ytf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:47 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	59315	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:47 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:47 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:47 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c05ef2b3-701e-005c-2d6a-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132647Z-r197bdfb6b4grkz4xgvkar0zcs00000004rg000000003284 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:47 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	59316	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:47 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:47 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132647Z-16849878b7898p5f6vryaqvp5800000005xg00000000cq6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	59317	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:48 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:48 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132648Z-15b8d89586frzkk2umu6w8qnt80000000nh00000000083be x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	59318	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:48 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:48 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:48 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: cd644fad-f01e-0071-6ce7-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132648Z-17c5cb586f69w69mgazyf263an000000044000000000b35z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:48 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	59319	13.107.246.45	443	6112	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:48 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:48 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:48 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: f0048a09-201e-00aa-2c22-293928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132648Z-15b8d89586fsx9lfqmgrbzpgmg0000000p1g000000000k0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:48 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	59320	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:48 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:48 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:48 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132648Z-16849878b785jrf8dn0d2rczaw000000065000000000knz8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:48 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	59321	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:48 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:48 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:48 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132648Z-16849878b78xblwksrnkakc08w000000049000000000gw69 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:48 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	59322	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:49 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:49 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132649Z-16849878b78bjkl8dpep89pbgg00000003vg0000000056tk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:49 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	59324	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:49 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:49 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132649Z-16849878b78fssff8btnns3b1400000005e0000000004qq7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:49 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	59325	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:49 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:49 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6ac6ea93-701e-0001-1898-25b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132649Z-15b8d89586fx2hlt035xdehq580000000nz0000000004fhk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:49 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	59323	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:49 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:49 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132649Z-16849878b7898p5f6vryaqvp58000000060g000000001nky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:49 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	59326	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:49 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:49 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132649Z-16849878b787bfsh7zgp804my400000003wg00000000an5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:49 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	59327	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:49 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: b03ac640-101e-007a-1bc8-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132649Z-r197bdfb6b42rt68rzg9338g1g000000065g000000009xh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:50 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	59328	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:49 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:50 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 62c48ea2-801e-00a0-6a3d-262196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132650Z-15b8d89586fnsf5zd126eyaetw000000066g00000000anw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	59329	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:50 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:50 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: ff0e8b8f-401e-008c-1c9c-2786c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132650Z-17c5cb586f6fqqst87nqkbsx1c00000003m000000000212h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:50 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	59331	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:50 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132650Z-16849878b78qfbkc5yywmsbg0c00000004r000000000exhv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:50 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	59333	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:50 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:50 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132650Z-16849878b78fhxrnedubv5byks00000003e000000000b2b0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:50 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	59332	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:50 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:50 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132650Z-16849878b7867ttgfbpnfxt44s00000004w000000000h2ru x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	59334	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:50 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:50 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4113dc96-c01e-008e-5a2a-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132650Z-16849878b78p49s6zkwt11bbkn00000004sg00000000anwh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:51 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	59335	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:51 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:51 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132651Z-16849878b78g2m84h2v9sta29000000003xg00000000k125 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:51 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	59337	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:51 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:51 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132651Z-16849878b78j5kdg3dndgqw0vg00000006sg00000000eyzp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:51 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	59338	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:51 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:51 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 2cda3f02-b01e-0021-7c8c-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132651Z-r197bdfb6b46kmj4701qkq60240000000470000000002au6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:52 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	59339	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:51 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:51 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132651Z-16849878b78bjkl8dpep89pbgg00000003v0000000007c3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:52 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	59340	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:52 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:52 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132652Z-15b8d89586frzkk2umu6w8qnt80000000nh00000000083ha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:52 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	59336	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:52 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132652Z-16849878b7867ttgfbpnfxt44s00000004v000000000mr3k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	59341	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:52 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:52 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 2ea78088-901e-0083-5428-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132652Z-15b8d89586f8nxpt6ys645x5v000000006cg000000000fh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:52 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	59342	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:52 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:52 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132652Z-15b8d89586fmhkw429ba5n22m800000006d0000000008yum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:52 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	59343	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:53 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:53 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132653Z-16849878b78qg9mlz11wgn0wcc00000004s0000000003xuu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:53 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	59344	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:53 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:54 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132653Z-16849878b7898p5f6vryaqvp5800000005z0000000007kmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:54 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	59346	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:53 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:53 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 8e439449-301e-0051-2567-2838bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132653Z-15b8d89586fmhkw429ba5n22m800000006g000000000548z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:53 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	59345	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:53 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:53 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: d4940829-c01e-0014-691e-27a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132653Z-17c5cb586f6r59nt869u8w8xt8000000043g000000003ynw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:53 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	59347	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:54 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:54 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: a86168e1-701e-0097-7f6b-27b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132654Z-r197bdfb6b4d9xksru4x6qbqr000000004xg00000000dzvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:54 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	59348	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:54 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:54 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132654Z-16849878b78j7llf5vkyvvcehs000000062g00000000k5yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:54 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	59349	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:54 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:54 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132654Z-16849878b78hh85qc40uyr8sc800000005bg00000000bvxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:54 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	59350	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:55 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:55 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 1fd9bb61-701e-003e-173a-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132655Z-15b8d89586fsx9lfqmgrbzpgmg0000000nzg000000004527 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:55 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	59351	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:55 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:55 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132655Z-16849878b78fssff8btnns3b14000000058000000000n9c0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:55 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	59353	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:55 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:55 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 897ec3ad-201e-005d-0167-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132655Z-16849878b78wv88bk51myq5vxc00000005eg00000000389t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:55 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	59352	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:55 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:55 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e176ca7a-701e-0097-7bca-26b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132655Z-17c5cb586f66g7mvbfuqdb2m3n000000052g00000000by9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:55 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	59354	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:56 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:56 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132656Z-16849878b786lft2mu9uftf3y4000000067g00000000kk49 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:56 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	59355	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:56 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132656Z-16849878b78fssff8btnns3b1400000005e0000000004r0y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	59356	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:56 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132656Z-16849878b78qfbkc5yywmsbg0c00000004v0000000003xdd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	59357	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:56 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:56 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 623250e5-d01e-00ad-1e9c-27e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132656Z-16849878b78km6fmmkbenhx76n00000004f0000000008cps x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:56 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	59358	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:56 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:56 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 622601ef-f01e-003c-2758-278cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132656Z-r197bdfb6b47gqdjqh2kwsuz8c00000005kg000000002gdf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:57 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	59359	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:56 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:57 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94cf4c5c-c01e-0034-1914-272af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132657Z-16849878b78nx5sne3fztmu6xc00000005y000000000ktxb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:57 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	59360	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:57 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:57 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: b018d53a-601e-0050-79af-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132657Z-r197bdfb6b4c8q4qvwwy2byzsw000000058g00000000928v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:57 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	59361	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:57 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:57 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: ff90b716-801e-0067-48e5-27fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132657Z-17c5cb586f626sn8grcgm1gf8000000003k0000000008crv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:57 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	59362	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:57 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:57 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 7f9b0e41-501e-0047-71a3-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132657Z-16849878b78q9m8bqvwuva4svc00000003pg000000007f51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:57 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	59363	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:57 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:57 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 7813ed72-001e-0034-3804-25dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132657Z-15b8d89586fhl2qtatrz3vfkf00000000b100000000082be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:58 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	59364	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:58 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:58 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: b2907cd8-f01e-0096-39f3-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132658Z-16849878b78j7llf5vkyvvcehs000000064g00000000g521 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:58 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	59365	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:58 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:58 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: d67ec764-101e-0017-6eff-2547c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132658Z-r197bdfb6b4bs5qf58wn14wgm00000000420000000006kvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:58 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	59366	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:58 UTC	192	OUT	GET /rules/rule703100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:58 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBCD5699" x-ms-request-id: 3351e9c9-c01e-0014-2df2-24a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132658Z-15b8d89586fhl2qtatrz3vfkf00000000b30000000005w9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 13:26:58 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	59367	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 13:26:58 UTC	192	OUT	GET /rules/rule702901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 13:26:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 13:26:58 GMT Content-Type: text/xml Content-Length: 1411 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE53FACDA" x-ms-request-id: 6dd908e6-f01e-0003-6057-274453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T132658Z-16849878b78km6fmmkbenhx76n00000004a000000000n9es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 13:26:58 UTC	1411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Manageability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2484, Parent PID: 5904

General

Target ID:	0
Start time:	09:25:31
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6112, Parent PID: 2484

General

Target ID:	2
Start time:	09:25:37
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1736 --field-trial-handle=2012,i,2871850995218753826,7982395101669501192,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6384, Parent PID: 5904

General

Target ID:	3
Start time:	09:25:40
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https:/wentworth.az1.qualtrics.com/jfe/form/SV_bEnaGtb0Jw7NaWa?Q_DL=QrigjMFTYZVVTqH_bEnaGtb0Jw7NaWa_CGC_gCML4CuBSL0ABp7&Q_CHL=email"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https:/wentworth.az1.qualtrics.com/jfe/form/SV_bEnaGtb0Jw7NaWa?Q_DL=QrigjMFTYZVVTqH_bEnaGtb0Jw7NaWa_CGC_gCML4CuBSL0ABp7&Q_CHL=email

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Windows Analysis Report
https:/wentworth.az1.qualtrics.com/jfe/form/SV_bEnaGtb0Jw7NaWa?Q_DL=QrigjMFTYZVVTqH_bEnaGtb0Jw7NaWa_CGC_gCML4CuBSL0ABp7&Q_CHL=email