Edit tour

Windows Analysis Report
https://erp.broadcom.net:443/OA_MEDIA/broadcom_2.gif

Overview

General Information

Sample URL:	https://erp.broadcom.net:443/OA_MEDIA/broadcom_2.gif
Analysis ID:	1544006
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2296,i,14942570135658488529,5959728580023110209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://erp.broadcom.net:443/OA_MEDIA/broadcom_2.gif" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: erp.broadcom.net
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@22/0@30/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2296,i,14942570135658488529,5959728580023110209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://erp.broadcom.net:443/OA_MEDIA/broadcom_2.gif"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2296,i,14942570135658488529,5959728580023110209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	142.250.186.46	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.202.1	true	false	unknown
erp.broadcom.net	unknown	unknown	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544006
Start date and time:	2024-10-28 17:50:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://erp.broadcom.net:443/OA_MEDIA/broadcom_2.gif
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@22/0@30/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 172.217.16.206, 64.233.184.84, 34.104.35.123, 52.149.20.212, 217.20.57.18, 20.242.39.171, 13.85.23.206, 172.217.23.99, 87.248.202.1, 192.229.221.95
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://erp.broadcom.net:443/OA_MEDIA/broadcom_2.gif

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 17:51:56.830822945 CET	49675	443	192.168.2.4	173.222.162.32
Oct 28, 2024 17:52:00.479866028 CET	49737	443	192.168.2.4	172.217.18.4
Oct 28, 2024 17:52:00.479901075 CET	443	49737	172.217.18.4	192.168.2.4
Oct 28, 2024 17:52:00.479965925 CET	49737	443	192.168.2.4	172.217.18.4
Oct 28, 2024 17:52:00.482383013 CET	49737	443	192.168.2.4	172.217.18.4
Oct 28, 2024 17:52:00.482393026 CET	443	49737	172.217.18.4	192.168.2.4
Oct 28, 2024 17:52:01.359886885 CET	443	49737	172.217.18.4	192.168.2.4
Oct 28, 2024 17:52:01.360342026 CET	49737	443	192.168.2.4	172.217.18.4
Oct 28, 2024 17:52:01.360367060 CET	443	49737	172.217.18.4	192.168.2.4
Oct 28, 2024 17:52:01.362004042 CET	443	49737	172.217.18.4	192.168.2.4
Oct 28, 2024 17:52:01.362071991 CET	49737	443	192.168.2.4	172.217.18.4
Oct 28, 2024 17:52:01.366014004 CET	49737	443	192.168.2.4	172.217.18.4
Oct 28, 2024 17:52:01.366111994 CET	443	49737	172.217.18.4	192.168.2.4
Oct 28, 2024 17:52:01.551728964 CET	49737	443	192.168.2.4	172.217.18.4
Oct 28, 2024 17:52:01.551773071 CET	443	49737	172.217.18.4	192.168.2.4
Oct 28, 2024 17:52:01.659605026 CET	49737	443	192.168.2.4	172.217.18.4
Oct 28, 2024 17:52:02.017302036 CET	49738	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:02.017354965 CET	443	49738	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:02.017627001 CET	49738	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:02.021502972 CET	49738	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:02.021517992 CET	443	49738	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:02.906949043 CET	443	49738	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:02.907020092 CET	49738	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:02.913991928 CET	49738	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:02.914014101 CET	443	49738	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:02.914350033 CET	443	49738	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:02.959836006 CET	49738	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:02.995392084 CET	49738	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:03.043375015 CET	443	49738	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:03.240559101 CET	443	49738	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:03.240643978 CET	443	49738	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:03.240724087 CET	49738	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:03.240943909 CET	49738	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:03.240968943 CET	443	49738	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:03.296794891 CET	49739	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:03.296848059 CET	443	49739	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:03.297002077 CET	49739	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:03.297600985 CET	49739	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:03.297621965 CET	443	49739	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:04.136833906 CET	443	49739	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:04.136930943 CET	49739	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:04.138495922 CET	49739	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:04.138505936 CET	443	49739	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:04.138849974 CET	443	49739	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:04.139904022 CET	49739	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:04.187325954 CET	443	49739	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:04.383249044 CET	443	49739	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:04.383342981 CET	443	49739	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:04.383451939 CET	49739	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:04.384066105 CET	49739	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:04.384115934 CET	443	49739	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:04.384146929 CET	49739	443	192.168.2.4	184.28.90.27
Oct 28, 2024 17:52:04.384165049 CET	443	49739	184.28.90.27	192.168.2.4
Oct 28, 2024 17:52:11.361226082 CET	443	49737	172.217.18.4	192.168.2.4
Oct 28, 2024 17:52:11.361382961 CET	443	49737	172.217.18.4	192.168.2.4
Oct 28, 2024 17:52:11.361448050 CET	49737	443	192.168.2.4	172.217.18.4
Oct 28, 2024 17:52:13.082607985 CET	49737	443	192.168.2.4	172.217.18.4
Oct 28, 2024 17:52:13.082662106 CET	443	49737	172.217.18.4	192.168.2.4
Oct 28, 2024 17:52:20.907713890 CET	49723	80	192.168.2.4	199.232.214.172
Oct 28, 2024 17:52:20.907902956 CET	49724	80	192.168.2.4	199.232.214.172
Oct 28, 2024 17:52:20.915328026 CET	80	49723	199.232.214.172	192.168.2.4
Oct 28, 2024 17:52:20.915385962 CET	49723	80	192.168.2.4	199.232.214.172
Oct 28, 2024 17:52:20.915968895 CET	80	49724	199.232.214.172	192.168.2.4
Oct 28, 2024 17:52:20.916049004 CET	49724	80	192.168.2.4	199.232.214.172
Oct 28, 2024 17:52:46.647248030 CET	49743	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:52:46.647310972 CET	443	49743	13.107.246.60	192.168.2.4
Oct 28, 2024 17:52:46.647418976 CET	49743	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:52:46.648431063 CET	49743	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:52:46.648467064 CET	443	49743	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:00.568119049 CET	49748	443	192.168.2.4	142.250.184.196
Oct 28, 2024 17:53:00.568218946 CET	443	49748	142.250.184.196	192.168.2.4
Oct 28, 2024 17:53:00.568437099 CET	49748	443	192.168.2.4	142.250.184.196
Oct 28, 2024 17:53:00.569109917 CET	49748	443	192.168.2.4	142.250.184.196
Oct 28, 2024 17:53:00.569147110 CET	443	49748	142.250.184.196	192.168.2.4
Oct 28, 2024 17:53:01.429960966 CET	443	49748	142.250.184.196	192.168.2.4
Oct 28, 2024 17:53:01.430394888 CET	49748	443	192.168.2.4	142.250.184.196
Oct 28, 2024 17:53:01.430437088 CET	443	49748	142.250.184.196	192.168.2.4
Oct 28, 2024 17:53:01.430948019 CET	443	49748	142.250.184.196	192.168.2.4
Oct 28, 2024 17:53:01.431962013 CET	49748	443	192.168.2.4	142.250.184.196
Oct 28, 2024 17:53:01.432063103 CET	443	49748	142.250.184.196	192.168.2.4
Oct 28, 2024 17:53:01.487102985 CET	49748	443	192.168.2.4	142.250.184.196
Oct 28, 2024 17:53:06.534172058 CET	49743	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.539793968 CET	49750	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.539865971 CET	443	49750	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:06.539895058 CET	49751	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.539978981 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:06.540081978 CET	49750	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.540155888 CET	49751	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.540802002 CET	49750	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.540837049 CET	443	49750	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:06.540994883 CET	49751	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.541033030 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:06.542937040 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.543015003 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:06.543097973 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.543240070 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.543271065 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:06.544420004 CET	49753	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.544451952 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:06.544646025 CET	49753	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.545721054 CET	49754	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.545743942 CET	443	49754	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:06.545881987 CET	49754	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.546107054 CET	49753	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.546119928 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:06.546271086 CET	49754	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:06.546288013 CET	443	49754	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.276446104 CET	443	49750	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.276519060 CET	49750	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.278352022 CET	49750	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.278364897 CET	443	49750	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.278608084 CET	443	49750	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.284121037 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.284209967 CET	49751	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.285458088 CET	49751	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.285490990 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.286241055 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.288227081 CET	49750	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.288274050 CET	49751	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.290891886 CET	443	49754	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.290977001 CET	49754	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.292000055 CET	49754	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.292042971 CET	443	49754	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.292383909 CET	443	49754	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.293103933 CET	49754	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.297301054 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.297370911 CET	49753	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.298510075 CET	49753	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.298522949 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.298767090 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.299423933 CET	49753	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.315455914 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.315557003 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.317034960 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.317051888 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.317504883 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.318233013 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.331353903 CET	443	49750	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.331386089 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.339339018 CET	443	49754	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.343333960 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.359344959 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.414428949 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.414479017 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.414535999 CET	49751	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.414597988 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.414642096 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.414714098 CET	49751	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.414834023 CET	49751	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.414871931 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.414896965 CET	49751	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.414912939 CET	443	49751	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.417711973 CET	49755	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.417747021 CET	443	49755	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.417855978 CET	49755	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.418011904 CET	49755	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.418036938 CET	443	49755	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.424067020 CET	443	49754	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.424293041 CET	443	49754	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.424341917 CET	49754	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.424401999 CET	49754	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.424457073 CET	443	49754	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.424493074 CET	49754	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.424509048 CET	443	49754	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.427022934 CET	49756	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.427057028 CET	443	49756	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.427186012 CET	49756	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.427282095 CET	49756	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.427306890 CET	443	49756	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.433146000 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.433161020 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.433208942 CET	49753	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.433218956 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.433232069 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.433276892 CET	49753	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.433408022 CET	49753	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.433423996 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.433434963 CET	49753	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.433442116 CET	443	49753	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.435285091 CET	49757	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.435321093 CET	443	49757	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.435409069 CET	49757	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.435523987 CET	49757	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.435535908 CET	443	49757	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.451700926 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.451750994 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.451812029 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.451843023 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.451875925 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.451900959 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.451942921 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.452002048 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.452025890 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.452050924 CET	49752	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.452061892 CET	443	49752	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.454133034 CET	49758	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.454155922 CET	443	49758	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.454261065 CET	49758	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.454375029 CET	49758	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.454390049 CET	443	49758	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.477699041 CET	443	49750	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.477894068 CET	443	49750	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.477991104 CET	49750	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.478039026 CET	49750	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.478039026 CET	49750	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.478056908 CET	443	49750	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.478070974 CET	443	49750	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.480107069 CET	49759	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.480171919 CET	443	49759	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:07.480288982 CET	49759	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.480429888 CET	49759	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:07.480448961 CET	443	49759	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.164315939 CET	443	49755	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.164884090 CET	49755	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.164901972 CET	443	49755	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.165358067 CET	49755	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.165369034 CET	443	49755	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.195949078 CET	443	49758	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.196433067 CET	49758	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.196455956 CET	443	49758	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.196928024 CET	49758	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.196934938 CET	443	49758	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.202054977 CET	443	49756	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.202416897 CET	49756	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.202426910 CET	443	49756	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.202739954 CET	49756	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.202745914 CET	443	49756	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.217313051 CET	443	49759	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.217701912 CET	49759	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.217736959 CET	443	49759	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.218025923 CET	49759	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.218041897 CET	443	49759	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.220415115 CET	443	49757	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.220773935 CET	49757	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.220808029 CET	443	49757	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.221117020 CET	49757	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.221127033 CET	443	49757	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.299696922 CET	443	49755	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.299753904 CET	443	49755	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.299901009 CET	49755	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.303648949 CET	49755	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.303669930 CET	443	49755	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.307300091 CET	49760	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.307338953 CET	443	49760	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.307452917 CET	49760	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.307660103 CET	49760	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.307674885 CET	443	49760	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.326751947 CET	443	49758	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.326966047 CET	443	49758	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.327155113 CET	49758	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.327203035 CET	49758	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.327220917 CET	443	49758	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.327234030 CET	49758	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.327240944 CET	443	49758	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.330264091 CET	49761	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.330305099 CET	443	49761	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.330537081 CET	49761	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.330725908 CET	49761	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.330740929 CET	443	49761	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.341104984 CET	443	49756	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.341260910 CET	443	49756	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.341346979 CET	49756	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.341496944 CET	49756	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.341501951 CET	443	49756	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.341548920 CET	49756	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.341553926 CET	443	49756	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.345976114 CET	49762	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.345985889 CET	443	49762	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.346236944 CET	49762	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.346429110 CET	49762	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.346441031 CET	443	49759	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.346450090 CET	443	49762	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.346494913 CET	443	49759	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.346577883 CET	49759	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.346873999 CET	49759	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.346887112 CET	443	49759	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.346918106 CET	49759	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.346925020 CET	443	49759	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.348709106 CET	49763	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.348726988 CET	443	49763	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.348834038 CET	49763	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.348947048 CET	49763	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.348959923 CET	443	49763	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.356101036 CET	443	49757	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.356302023 CET	443	49757	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.356391907 CET	49757	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.356391907 CET	49757	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.356419086 CET	49757	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.356426954 CET	443	49757	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.358587027 CET	49764	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.358617067 CET	443	49764	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:08.358690977 CET	49764	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.358799934 CET	49764	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:08.358813047 CET	443	49764	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.049079895 CET	443	49760	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.050021887 CET	49760	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.050045967 CET	443	49760	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.051094055 CET	49760	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.051100016 CET	443	49760	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.074532986 CET	443	49761	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.075001955 CET	49761	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.075037956 CET	443	49761	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.075474977 CET	49761	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.075480938 CET	443	49761	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.078814030 CET	443	49762	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.079118013 CET	49762	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.079135895 CET	443	49762	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.079416037 CET	49762	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.079431057 CET	443	49762	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.081799984 CET	443	49763	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.082251072 CET	49763	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.082257986 CET	443	49763	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.082775116 CET	49763	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.082779884 CET	443	49763	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.107042074 CET	443	49764	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.107479095 CET	49764	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.107517958 CET	443	49764	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.107892036 CET	49764	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.107906103 CET	443	49764	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.186395884 CET	443	49760	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.186461926 CET	443	49760	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.186611891 CET	49760	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.186742067 CET	49760	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.186742067 CET	49760	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.186778069 CET	443	49760	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.186794043 CET	443	49760	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.189925909 CET	49765	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.190006018 CET	443	49765	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.190123081 CET	49765	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.190314054 CET	49765	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.190334082 CET	443	49765	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.207509995 CET	443	49761	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.207736969 CET	443	49761	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.207823992 CET	49761	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.207823992 CET	49761	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.207941055 CET	49761	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.207956076 CET	443	49761	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.210165977 CET	49766	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.210269928 CET	443	49766	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.210367918 CET	49766	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.210535049 CET	49766	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.210572004 CET	443	49766	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.210822105 CET	443	49762	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.210930109 CET	443	49762	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.210983038 CET	49762	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.211023092 CET	49762	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.211023092 CET	49762	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.211040020 CET	443	49762	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.211061954 CET	443	49762	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.212848902 CET	49767	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.212883949 CET	443	49767	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.213159084 CET	49767	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.213303089 CET	49767	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.213330030 CET	443	49767	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.214662075 CET	443	49763	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.214808941 CET	443	49763	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.214895010 CET	49763	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.214895010 CET	49763	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.214895010 CET	49763	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.216651917 CET	49768	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.216692924 CET	443	49768	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.216767073 CET	49768	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.216888905 CET	49768	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.216907024 CET	443	49768	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.242008924 CET	443	49764	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.242229939 CET	443	49764	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.242312908 CET	49764	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.242369890 CET	49764	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.242371082 CET	49764	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.242398977 CET	443	49764	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.242409945 CET	443	49764	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.244400978 CET	49769	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.244432926 CET	443	49769	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.244599104 CET	49769	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.244781971 CET	49769	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.244792938 CET	443	49769	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.518407106 CET	49763	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.518435955 CET	443	49763	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.924182892 CET	443	49765	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.925710917 CET	49765	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.925811052 CET	443	49765	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.926191092 CET	49765	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.926206112 CET	443	49765	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.949898958 CET	443	49768	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.950421095 CET	49768	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.950469971 CET	443	49767	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.950505972 CET	443	49768	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.950824022 CET	49768	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.950838089 CET	443	49768	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.951163054 CET	49767	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.951195955 CET	443	49767	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.951558113 CET	49767	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.951569080 CET	443	49767	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.961384058 CET	443	49766	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.961734056 CET	49766	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.961808920 CET	443	49766	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.962115049 CET	49766	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.962130070 CET	443	49766	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.983401060 CET	443	49769	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.983726978 CET	49769	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.983747005 CET	443	49769	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:09.984069109 CET	49769	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:09.984072924 CET	443	49769	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.054969072 CET	443	49765	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.055143118 CET	443	49765	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.055584908 CET	49765	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.055644989 CET	49765	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.055689096 CET	443	49765	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.055717945 CET	49765	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.055737972 CET	443	49765	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.059120893 CET	49770	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.059163094 CET	443	49770	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.059240103 CET	49770	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.059422970 CET	49770	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.059438944 CET	443	49770	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.082400084 CET	443	49768	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.082614899 CET	443	49768	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.082724094 CET	49768	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.082767010 CET	49768	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.082779884 CET	443	49768	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.082796097 CET	49768	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.082802057 CET	443	49768	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.084340096 CET	443	49767	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.084397078 CET	443	49767	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.084492922 CET	49767	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.084687948 CET	49767	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.084687948 CET	49767	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.084709883 CET	443	49767	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.084733009 CET	443	49767	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.085797071 CET	49771	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.085828066 CET	443	49771	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.085913897 CET	49771	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.087532043 CET	49772	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.087569952 CET	443	49772	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.087681055 CET	49772	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.087743044 CET	49771	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.087755919 CET	443	49771	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.087943077 CET	49772	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.087960005 CET	443	49772	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.096801996 CET	443	49766	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.097178936 CET	443	49766	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.097255945 CET	49766	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.097255945 CET	49766	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.097321987 CET	49766	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.097352982 CET	443	49766	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.098974943 CET	49773	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.099036932 CET	443	49773	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.099111080 CET	49773	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.099212885 CET	49773	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.099232912 CET	443	49773	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.114449024 CET	443	49769	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.114500999 CET	443	49769	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.114558935 CET	49769	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.114624977 CET	49769	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.114636898 CET	443	49769	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.114646912 CET	49769	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.114650965 CET	443	49769	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.116415024 CET	49774	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.116429090 CET	443	49774	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.116482973 CET	49774	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.116609097 CET	49774	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.116622925 CET	443	49774	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.796209097 CET	443	49770	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.796931028 CET	49770	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.796962976 CET	443	49770	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.797466993 CET	49770	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.797475100 CET	443	49770	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.821403980 CET	443	49772	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.822274923 CET	49772	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.822274923 CET	49772	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.822303057 CET	443	49772	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.822318077 CET	443	49772	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.822715998 CET	443	49773	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.823026896 CET	49773	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.823082924 CET	443	49773	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.823353052 CET	49773	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.823367119 CET	443	49773	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.850737095 CET	443	49774	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.851391077 CET	49774	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.851391077 CET	49774	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.851412058 CET	443	49774	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.851428032 CET	443	49774	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.866950035 CET	443	49771	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.867607117 CET	49771	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.867607117 CET	49771	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.867630959 CET	443	49771	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.867644072 CET	443	49771	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.928565979 CET	443	49770	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.928996086 CET	443	49770	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.929117918 CET	49770	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.929117918 CET	49770	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.929440022 CET	49770	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.929461002 CET	443	49770	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.932437897 CET	49775	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.932511091 CET	443	49775	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.932678938 CET	49775	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.932791948 CET	49775	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.932823896 CET	443	49775	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.949238062 CET	443	49773	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.949728966 CET	443	49773	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.949850082 CET	49773	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.949850082 CET	49773	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.949898005 CET	49773	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.949918032 CET	443	49773	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.951899052 CET	49776	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.951932907 CET	443	49776	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.952078104 CET	49776	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.952197075 CET	49776	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.952207088 CET	443	49776	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.957642078 CET	443	49772	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.958220959 CET	443	49772	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.958292961 CET	49772	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.958292961 CET	49772	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.958400965 CET	49772	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.958424091 CET	443	49772	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.960105896 CET	49777	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.960124969 CET	443	49777	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.960243940 CET	49777	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.960295916 CET	49777	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.960311890 CET	443	49777	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.988992929 CET	443	49774	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.989603996 CET	443	49774	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.989686966 CET	49774	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.989686966 CET	49774	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.989734888 CET	49774	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.989743948 CET	443	49774	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.991596937 CET	49778	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.991620064 CET	443	49778	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:10.991712093 CET	49778	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.991852999 CET	49778	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:10.991863012 CET	443	49778	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.002136946 CET	443	49771	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.002414942 CET	443	49771	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.002496004 CET	49771	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.002496004 CET	49771	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.002693892 CET	49771	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.002701998 CET	443	49771	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.004498959 CET	49779	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.004509926 CET	443	49779	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.004744053 CET	49779	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.004745007 CET	49779	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.004811049 CET	443	49779	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.425010920 CET	443	49748	142.250.184.196	192.168.2.4
Oct 28, 2024 17:53:11.425081968 CET	443	49748	142.250.184.196	192.168.2.4
Oct 28, 2024 17:53:11.425246954 CET	49748	443	192.168.2.4	142.250.184.196
Oct 28, 2024 17:53:11.672499895 CET	443	49775	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.673048019 CET	49775	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.673072100 CET	443	49775	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.673542976 CET	49775	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.673547983 CET	443	49775	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.727996111 CET	443	49777	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.728944063 CET	49777	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.728976011 CET	443	49777	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.729516029 CET	49777	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.729523897 CET	443	49777	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.733688116 CET	443	49778	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.734092951 CET	49778	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.734107971 CET	443	49778	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.734594107 CET	49778	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.734600067 CET	443	49778	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.735383034 CET	443	49776	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.735831022 CET	49776	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.735838890 CET	443	49776	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.736378908 CET	49776	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.736382961 CET	443	49776	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.749128103 CET	443	49779	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.749511003 CET	49779	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.749530077 CET	443	49779	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.750075102 CET	49779	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.750081062 CET	443	49779	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.839924097 CET	443	49775	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.840176105 CET	443	49775	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.840245962 CET	49775	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.840320110 CET	49775	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.840320110 CET	49775	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.840359926 CET	443	49775	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.840384007 CET	443	49775	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.843460083 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.843509912 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.843599081 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.843764067 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.843795061 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.862503052 CET	443	49777	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.862797976 CET	443	49778	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.863235950 CET	443	49777	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.863292933 CET	49777	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.863404036 CET	49777	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.863435984 CET	443	49777	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.863467932 CET	49777	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.863482952 CET	443	49777	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.863585949 CET	443	49778	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.863626957 CET	49778	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.863691092 CET	49778	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.863703012 CET	443	49778	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.863713026 CET	49778	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.863718033 CET	443	49778	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.866468906 CET	49781	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.866503954 CET	443	49781	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.866586924 CET	49781	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.866712093 CET	49781	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.866729021 CET	443	49781	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.866803885 CET	49782	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.866831064 CET	443	49782	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.866884947 CET	49782	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.866970062 CET	49782	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.866981030 CET	443	49782	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.868604898 CET	443	49776	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.869472980 CET	443	49776	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.869636059 CET	49776	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.869668007 CET	49776	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.869673014 CET	443	49776	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.869682074 CET	49776	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.869684935 CET	443	49776	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.872070074 CET	49783	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.872081041 CET	443	49783	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.872145891 CET	49783	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.872294903 CET	49783	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.872309923 CET	443	49783	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.911550999 CET	443	49779	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.911638021 CET	443	49779	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.911699057 CET	49779	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.911768913 CET	49779	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.911768913 CET	49779	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.911791086 CET	443	49779	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.911813021 CET	443	49779	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.913625002 CET	49784	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.913649082 CET	443	49784	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:11.913707972 CET	49784	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.913820982 CET	49784	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:11.913831949 CET	443	49784	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.582588911 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.583229065 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.583268881 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.584024906 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.584039927 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.611637115 CET	443	49781	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.612225056 CET	49781	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.612248898 CET	443	49781	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.613285065 CET	49781	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.613295078 CET	443	49781	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.633342028 CET	443	49782	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.633858919 CET	49782	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.633892059 CET	443	49782	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.634691954 CET	49782	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.634701014 CET	443	49782	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.645802021 CET	443	49783	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.646442890 CET	49783	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.646451950 CET	443	49783	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.647461891 CET	49783	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.647469044 CET	443	49783	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.664242983 CET	443	49784	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.664625883 CET	49784	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.664649010 CET	443	49784	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.665693998 CET	49784	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.665699959 CET	443	49784	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.715292931 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.715508938 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.715581894 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.716315985 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.716347933 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.720668077 CET	49785	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.720761061 CET	443	49785	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.721198082 CET	49785	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.721611023 CET	49785	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.721652031 CET	443	49785	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.746254921 CET	443	49781	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.746814013 CET	443	49781	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.747034073 CET	49781	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.747066021 CET	49781	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.747081995 CET	443	49781	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.747091055 CET	49781	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.747097969 CET	443	49781	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.750546932 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.750583887 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.750961065 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.751332998 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.751342058 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.774301052 CET	443	49782	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.774354935 CET	443	49782	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.774981022 CET	49782	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.775144100 CET	49782	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.775182009 CET	443	49782	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.775208950 CET	49782	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.775223970 CET	443	49782	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.777900934 CET	49787	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.777932882 CET	443	49787	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.778877974 CET	443	49783	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.778911114 CET	49787	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.779202938 CET	49787	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.779232025 CET	443	49787	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.779504061 CET	443	49783	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.779555082 CET	49783	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.779690981 CET	49783	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.779704094 CET	443	49783	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.779715061 CET	49783	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.779720068 CET	443	49783	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.783363104 CET	49788	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.783441067 CET	443	49788	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.783905029 CET	49788	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.784279108 CET	49788	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.784317017 CET	443	49788	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.799277067 CET	443	49784	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.799755096 CET	443	49784	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.799844027 CET	49784	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.799880981 CET	49784	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.799881935 CET	49784	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.799895048 CET	443	49784	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.799901962 CET	443	49784	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.802795887 CET	49789	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.802871943 CET	443	49789	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:12.803097010 CET	49789	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.803255081 CET	49789	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:12.803291082 CET	443	49789	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.085207939 CET	49748	443	192.168.2.4	142.250.184.196
Oct 28, 2024 17:53:13.085228920 CET	443	49748	142.250.184.196	192.168.2.4
Oct 28, 2024 17:53:13.468274117 CET	443	49785	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.468727112 CET	49785	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.468787909 CET	443	49785	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.469235897 CET	49785	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.469270945 CET	443	49785	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.509370089 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.509761095 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.509778976 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.510303974 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.510308981 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.528609037 CET	443	49787	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.528996944 CET	49787	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.529026985 CET	443	49787	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.529462099 CET	49787	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.529474020 CET	443	49787	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.533411980 CET	443	49788	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.533763885 CET	49788	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.533788919 CET	443	49788	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.534291983 CET	49788	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.534297943 CET	443	49788	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.539031982 CET	443	49789	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.539364100 CET	49789	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.539391041 CET	443	49789	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.539730072 CET	49789	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.539736032 CET	443	49789	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.601366997 CET	443	49785	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.601726055 CET	443	49785	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.601794004 CET	49785	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.601850986 CET	49785	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.601891994 CET	443	49785	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.601921082 CET	49785	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.601938009 CET	443	49785	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.605290890 CET	49790	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.605360031 CET	443	49790	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.605437040 CET	49790	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.605592012 CET	49790	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.605643988 CET	443	49790	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.637525082 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.637706995 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.637756109 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.637797117 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.637808084 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.637816906 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.637821913 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.639687061 CET	49791	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.639710903 CET	443	49791	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.639811039 CET	49791	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.639977932 CET	49791	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.639992952 CET	443	49791	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.661647081 CET	443	49787	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.661933899 CET	443	49787	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.662038088 CET	49787	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.662086964 CET	49787	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.662086964 CET	49787	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.662111998 CET	443	49787	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.662133932 CET	443	49787	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.663949966 CET	49792	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.663969040 CET	443	49792	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.664057970 CET	49792	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.664230108 CET	49792	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.664237022 CET	443	49792	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.666152000 CET	443	49788	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.666444063 CET	443	49788	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.666526079 CET	49788	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.666578054 CET	49788	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.666599035 CET	443	49788	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.666634083 CET	49788	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.666646957 CET	443	49788	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.668404102 CET	49793	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.668446064 CET	443	49793	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.668513060 CET	49793	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.668658972 CET	49793	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.668689013 CET	443	49793	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.668991089 CET	443	49789	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.669348955 CET	443	49789	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.669573069 CET	49789	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.669595957 CET	49789	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.669603109 CET	443	49789	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.669612885 CET	49789	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.669617891 CET	443	49789	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.671426058 CET	49794	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.671442986 CET	443	49794	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:13.671489000 CET	49794	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.671665907 CET	49794	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:13.671675920 CET	443	49794	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.343861103 CET	443	49790	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.344738007 CET	49790	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.344820023 CET	443	49790	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.345488071 CET	49790	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.345504045 CET	443	49790	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.395992994 CET	443	49791	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.396620035 CET	49791	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.396682024 CET	443	49791	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.397138119 CET	49791	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.397152901 CET	443	49791	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.478236914 CET	443	49790	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.478499889 CET	443	49790	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.478566885 CET	49790	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.478816986 CET	49790	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.478816986 CET	49790	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.478854895 CET	443	49790	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.478879929 CET	443	49790	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.482394934 CET	49795	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.482459068 CET	443	49795	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.482808113 CET	49795	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.483143091 CET	49795	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.483174086 CET	443	49795	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.529783964 CET	443	49791	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.529867887 CET	443	49791	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.529933929 CET	49791	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.530355930 CET	49791	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.530355930 CET	49791	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.530399084 CET	443	49791	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.530426979 CET	443	49791	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.535641909 CET	49796	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.535712004 CET	443	49796	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.535844088 CET	49796	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.536015987 CET	49796	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.536046028 CET	443	49796	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.677216053 CET	443	49794	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.677664042 CET	49794	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.677687883 CET	443	49794	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.678114891 CET	49794	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.678119898 CET	443	49794	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.689757109 CET	443	49792	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.690200090 CET	49792	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.690211058 CET	443	49792	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.690634012 CET	49792	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.690638065 CET	443	49792	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.692629099 CET	443	49793	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.692946911 CET	49793	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.692974091 CET	443	49793	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.693356991 CET	49793	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.693370104 CET	443	49793	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.810260057 CET	443	49794	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.810501099 CET	443	49794	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.810592890 CET	49794	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.810672045 CET	49794	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.810689926 CET	443	49794	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.810700893 CET	49794	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.810705900 CET	443	49794	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.813690901 CET	49797	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.813782930 CET	443	49797	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.813868046 CET	49797	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.814028025 CET	49797	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.814064026 CET	443	49797	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.825649023 CET	443	49792	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.825865984 CET	443	49792	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.825923920 CET	49792	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.825953960 CET	49792	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.825959921 CET	443	49792	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.825970888 CET	49792	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.825974941 CET	443	49792	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.828243971 CET	49798	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.828326941 CET	443	49798	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.828398943 CET	49798	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.828506947 CET	49798	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.828541040 CET	443	49798	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.828855038 CET	443	49793	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.829000950 CET	443	49793	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.829057932 CET	49793	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.829122066 CET	49793	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.829122066 CET	49793	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.829150915 CET	443	49793	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.829175949 CET	443	49793	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.831171989 CET	49799	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.831197977 CET	443	49799	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:14.831267118 CET	49799	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.831366062 CET	49799	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:14.831392050 CET	443	49799	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.218482018 CET	443	49795	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.219563961 CET	49795	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.219623089 CET	443	49795	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.220369101 CET	49795	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.220381021 CET	443	49795	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.288717985 CET	443	49796	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.289304972 CET	49796	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.289346933 CET	443	49796	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.290294886 CET	49796	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.290302038 CET	443	49796	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.348792076 CET	443	49795	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.348881960 CET	443	49795	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.349020958 CET	49795	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.349318027 CET	49795	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.349347115 CET	443	49795	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.349384069 CET	49795	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.349399090 CET	443	49795	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.352893114 CET	49800	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.352924109 CET	443	49800	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.353121042 CET	49800	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.353538036 CET	49800	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.353549004 CET	443	49800	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.426028967 CET	443	49796	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.426203966 CET	443	49796	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.426276922 CET	49796	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.426568985 CET	49796	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.426606894 CET	443	49796	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.426644087 CET	49796	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.426660061 CET	443	49796	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.430191994 CET	49801	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.430242062 CET	443	49801	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.430304050 CET	49801	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.430533886 CET	49801	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.430552006 CET	443	49801	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.543864965 CET	443	49797	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.544344902 CET	49797	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.544404984 CET	443	49797	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.545383930 CET	49797	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.545399904 CET	443	49797	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.591027975 CET	443	49799	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.591686010 CET	49799	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.591731071 CET	443	49799	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.592674971 CET	49799	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.592685938 CET	443	49799	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.671818972 CET	443	49797	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.672257900 CET	443	49797	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.672452927 CET	49797	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.672578096 CET	49797	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.672578096 CET	49797	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.672616959 CET	443	49797	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.672658920 CET	443	49797	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.675815105 CET	49802	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.675841093 CET	443	49802	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.675920010 CET	49802	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.676120043 CET	49802	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.676131964 CET	443	49802	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.728276968 CET	443	49799	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.728477955 CET	443	49799	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.728540897 CET	49799	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.728724957 CET	49799	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.728725910 CET	49799	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.728749037 CET	443	49799	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.728770971 CET	443	49799	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.733649969 CET	49803	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.733676910 CET	443	49803	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:15.733916998 CET	49803	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.734165907 CET	49803	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:15.734181881 CET	443	49803	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.114718914 CET	443	49800	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.115272045 CET	49800	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.115286112 CET	443	49800	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.115794897 CET	49800	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.115801096 CET	443	49800	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.166273117 CET	443	49801	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.166758060 CET	49801	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.166774035 CET	443	49801	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.167217016 CET	49801	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.167223930 CET	443	49801	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.251300097 CET	443	49800	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.251462936 CET	443	49800	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.251568079 CET	49800	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.251595020 CET	49800	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.251610041 CET	443	49800	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.251619101 CET	49800	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.251625061 CET	443	49800	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.254842043 CET	49804	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.254935026 CET	443	49804	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.255017996 CET	49804	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.255162001 CET	49804	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.255194902 CET	443	49804	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.299194098 CET	443	49801	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.299352884 CET	443	49801	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.299421072 CET	49801	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.299710035 CET	49801	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.299726009 CET	443	49801	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.299737930 CET	49801	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.299745083 CET	443	49801	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.303185940 CET	49805	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.303212881 CET	443	49805	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.303802967 CET	49805	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.304033995 CET	49805	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.304049015 CET	443	49805	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.413450956 CET	443	49802	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.418028116 CET	49802	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.418042898 CET	443	49802	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.418883085 CET	49802	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.418888092 CET	443	49802	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.472429991 CET	443	49803	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.473299980 CET	49803	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.473311901 CET	443	49803	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.473961115 CET	49803	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.473968029 CET	443	49803	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.546111107 CET	443	49802	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.546341896 CET	443	49802	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.546386003 CET	49802	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.546423912 CET	49802	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.546442032 CET	443	49802	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.546451092 CET	49802	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.546457052 CET	443	49802	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.549712896 CET	49806	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.549746990 CET	443	49806	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.549915075 CET	49806	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.550163031 CET	49806	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.550175905 CET	443	49806	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.595557928 CET	443	49798	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.595897913 CET	49798	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.595932007 CET	443	49798	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.596508026 CET	49798	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.596515894 CET	443	49798	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.601520061 CET	443	49803	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.601743937 CET	443	49803	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.601794004 CET	49803	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.602052927 CET	49803	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.602061033 CET	443	49803	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.604906082 CET	49807	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.604919910 CET	443	49807	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.604995966 CET	49807	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.605113029 CET	49807	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.605125904 CET	443	49807	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.730129004 CET	443	49798	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.730564117 CET	443	49798	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.730665922 CET	49798	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.730715036 CET	49798	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.730715036 CET	49798	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.730747938 CET	443	49798	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.730770111 CET	443	49798	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.734175920 CET	49808	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.734194994 CET	443	49808	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.734350920 CET	49808	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.734532118 CET	49808	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.734546900 CET	443	49808	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.986336946 CET	443	49804	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.986993074 CET	49804	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.987016916 CET	443	49804	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:16.987458944 CET	49804	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:16.987468004 CET	443	49804	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.056427956 CET	443	49805	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.056900978 CET	49805	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.056911945 CET	443	49805	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.057351112 CET	49805	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.057356119 CET	443	49805	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.118550062 CET	443	49804	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.118818045 CET	443	49804	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.118870020 CET	49804	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.121931076 CET	49804	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.121948957 CET	443	49804	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.121958971 CET	49804	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.121963978 CET	443	49804	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.133032084 CET	49809	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.133064032 CET	443	49809	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.133219957 CET	49809	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.133394003 CET	49809	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.133407116 CET	443	49809	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.189769030 CET	443	49805	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.189933062 CET	443	49805	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.189985991 CET	49805	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.190160990 CET	49805	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.190172911 CET	443	49805	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.190184116 CET	49805	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.190188885 CET	443	49805	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.205261946 CET	49810	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.205286026 CET	443	49810	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.205348015 CET	49810	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.205903053 CET	49810	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.205919981 CET	443	49810	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.325732946 CET	443	49806	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.326241016 CET	49806	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.326261044 CET	443	49806	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.326726913 CET	49806	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.326733112 CET	443	49806	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.352525949 CET	443	49807	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.352890015 CET	49807	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.352905989 CET	443	49807	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.353367090 CET	49807	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.353372097 CET	443	49807	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.462400913 CET	443	49806	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.462557077 CET	443	49806	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.462656975 CET	49806	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.462713957 CET	49806	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.462728977 CET	443	49806	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.462738037 CET	49806	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.462743998 CET	443	49806	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.465698004 CET	49811	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.465728998 CET	443	49811	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.465836048 CET	49811	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.465960026 CET	49811	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.465979099 CET	443	49811	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.479937077 CET	443	49808	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.480328083 CET	49808	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.480349064 CET	443	49808	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.480761051 CET	49808	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.480767965 CET	443	49808	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.496942997 CET	443	49807	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.497098923 CET	443	49807	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.497154951 CET	49807	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.497179985 CET	49807	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.497193098 CET	443	49807	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.497200966 CET	49807	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.497205973 CET	443	49807	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.499249935 CET	49812	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.499264956 CET	443	49812	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.499330044 CET	49812	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.499476910 CET	49812	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.499490976 CET	443	49812	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.611813068 CET	443	49808	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.612071037 CET	443	49808	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.612126112 CET	49808	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.612154007 CET	49808	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.612169027 CET	443	49808	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.612180948 CET	49808	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.612189054 CET	443	49808	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.614346981 CET	49813	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.614375114 CET	443	49813	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:17.614432096 CET	49813	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.614612103 CET	49813	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:17.614624977 CET	443	49813	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.101620913 CET	443	49809	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.102252960 CET	49809	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.102267981 CET	443	49809	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.102819920 CET	49809	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.102834940 CET	443	49809	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.107671022 CET	443	49810	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.108200073 CET	49810	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.108258963 CET	443	49810	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.108652115 CET	49810	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.108666897 CET	443	49810	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.232836008 CET	443	49809	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.232919931 CET	443	49809	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.233017921 CET	49809	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.233198881 CET	49809	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.233198881 CET	49809	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.233215094 CET	443	49809	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.233223915 CET	443	49809	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.234982014 CET	443	49812	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.235510111 CET	49812	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.235522985 CET	443	49812	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.236084938 CET	49812	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.236089945 CET	443	49812	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.237201929 CET	49814	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.237224102 CET	443	49814	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.237425089 CET	49814	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.237425089 CET	49814	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.237447023 CET	443	49814	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.239219904 CET	443	49811	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.239659071 CET	49811	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.239681959 CET	443	49811	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.240078926 CET	49811	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.240093946 CET	443	49811	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.246706009 CET	443	49810	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.246902943 CET	443	49810	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.246980906 CET	49810	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.246980906 CET	49810	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.247088909 CET	49810	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.247102976 CET	443	49810	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.249217033 CET	49815	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.249299049 CET	443	49815	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.249385118 CET	49815	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.249706984 CET	49815	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.249742985 CET	443	49815	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.359106064 CET	443	49813	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.359450102 CET	49813	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.359477997 CET	443	49813	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.359972954 CET	49813	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.359987974 CET	443	49813	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.366641045 CET	443	49812	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.366898060 CET	443	49812	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.367012978 CET	49812	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.367027044 CET	49812	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.367027044 CET	49812	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.367034912 CET	443	49812	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.367044926 CET	443	49812	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.369288921 CET	49816	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.369314909 CET	443	49816	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.369388103 CET	49816	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.369545937 CET	49816	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.369563103 CET	443	49816	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.372605085 CET	443	49811	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.372823000 CET	443	49811	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.372952938 CET	49811	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.373159885 CET	49811	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.373176098 CET	443	49811	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.373209000 CET	49811	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.373214960 CET	443	49811	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.376831055 CET	49817	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.376857996 CET	443	49817	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.381128073 CET	49817	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.381376028 CET	49817	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.381385088 CET	443	49817	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.492418051 CET	443	49813	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.492538929 CET	443	49813	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.492861032 CET	49813	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.492861986 CET	49813	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.493910074 CET	49813	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.493952990 CET	443	49813	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.495560884 CET	49818	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.495599985 CET	443	49818	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.495826960 CET	49818	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.495929003 CET	49818	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.495959997 CET	443	49818	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.967859030 CET	443	49814	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.968720913 CET	49814	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.968739986 CET	443	49814	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.969403028 CET	49814	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.969408989 CET	443	49814	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.990204096 CET	443	49815	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.990982056 CET	49815	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.991025925 CET	443	49815	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:18.991240025 CET	49815	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:18.991252899 CET	443	49815	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.088795900 CET	443	49816	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.089916945 CET	49816	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.089916945 CET	49816	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.089950085 CET	443	49816	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.089982986 CET	443	49816	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.101664066 CET	443	49814	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.101726055 CET	443	49814	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.101949930 CET	49814	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.102056026 CET	49814	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.102066040 CET	443	49814	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.102102041 CET	49814	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.102108002 CET	443	49814	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.105088949 CET	49819	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.105124950 CET	443	49819	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.105214119 CET	49819	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.105498075 CET	49819	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.105505943 CET	443	49819	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.121330976 CET	443	49815	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.121480942 CET	443	49815	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.121665001 CET	49815	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.121665001 CET	49815	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.123013020 CET	49815	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.123048067 CET	443	49815	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.124398947 CET	49820	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.124484062 CET	443	49820	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.124640942 CET	49820	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.124808073 CET	49820	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.124846935 CET	443	49820	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.135293007 CET	443	49817	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.136224031 CET	49817	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.136224985 CET	49817	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.136239052 CET	443	49817	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.136254072 CET	443	49817	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.220983982 CET	443	49816	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.221471071 CET	443	49816	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.221654892 CET	49816	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.221710920 CET	49816	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.221740007 CET	443	49816	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.221781015 CET	49816	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.221795082 CET	443	49816	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.225063086 CET	49821	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.225109100 CET	443	49821	13.107.246.60	192.168.2.4
Oct 28, 2024 17:53:19.225234032 CET	49821	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.225404024 CET	49821	443	192.168.2.4	13.107.246.60
Oct 28, 2024 17:53:19.225435972 CET	443	49821	13.107.246.60	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 17:51:56.240153074 CET	53	64319	1.1.1.1	192.168.2.4
Oct 28, 2024 17:51:56.473037004 CET	53	53845	1.1.1.1	192.168.2.4
Oct 28, 2024 17:51:57.913772106 CET	53	50632	1.1.1.1	192.168.2.4
Oct 28, 2024 17:51:58.323080063 CET	51243	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:51:58.323559999 CET	50587	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:51:58.335896969 CET	53	51243	1.1.1.1	192.168.2.4
Oct 28, 2024 17:51:58.335983992 CET	53	50587	1.1.1.1	192.168.2.4
Oct 28, 2024 17:51:58.337186098 CET	49658	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:51:58.347147942 CET	53	49658	1.1.1.1	192.168.2.4
Oct 28, 2024 17:51:58.484122038 CET	62289	53	192.168.2.4	8.8.8.8
Oct 28, 2024 17:51:58.484458923 CET	63162	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:51:58.493041992 CET	53	63162	1.1.1.1	192.168.2.4
Oct 28, 2024 17:51:58.493115902 CET	53	62289	8.8.8.8	192.168.2.4
Oct 28, 2024 17:51:59.487139940 CET	65446	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:51:59.487410069 CET	64941	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:51:59.497486115 CET	53	65446	1.1.1.1	192.168.2.4
Oct 28, 2024 17:51:59.498898029 CET	53	64941	1.1.1.1	192.168.2.4
Oct 28, 2024 17:51:59.570842981 CET	62847	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:51:59.571481943 CET	53374	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:51:59.584369898 CET	53	53374	1.1.1.1	192.168.2.4
Oct 28, 2024 17:51:59.586271048 CET	53	62847	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:00.436568022 CET	57531	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:00.436845064 CET	56523	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:00.444529057 CET	53	57531	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:00.444545031 CET	53	56523	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:04.607836008 CET	57085	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:04.608350039 CET	63736	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:04.617538929 CET	53	63736	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:04.618202925 CET	53	57085	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:04.620807886 CET	54327	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:04.630327940 CET	53	54327	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:07.000515938 CET	138	138	192.168.2.4	192.168.2.255
Oct 28, 2024 17:52:10.920723915 CET	55203	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:10.920943975 CET	49156	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:10.934735060 CET	53	55203	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:10.937124014 CET	53	49156	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:10.938411951 CET	61117	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:10.949096918 CET	53	61117	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:10.962730885 CET	60218	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:10.963176966 CET	58077	53	192.168.2.4	8.8.8.8
Oct 28, 2024 17:52:10.970494032 CET	53	60218	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:10.970814943 CET	53	58077	8.8.8.8	192.168.2.4
Oct 28, 2024 17:52:14.900340080 CET	53	59043	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:29.988531113 CET	49885	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:29.998505116 CET	53	49885	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:33.918145895 CET	53	60522	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:40.979134083 CET	52141	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:40.979285955 CET	59491	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:40.989250898 CET	53	52141	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:40.989435911 CET	53	59491	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:40.992798090 CET	60185	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:52:41.002811909 CET	53	60185	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:55.980873108 CET	53	53199	1.1.1.1	192.168.2.4
Oct 28, 2024 17:52:56.355222940 CET	53	57992	1.1.1.1	192.168.2.4
Oct 28, 2024 17:53:00.556878090 CET	49332	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:53:00.557291031 CET	54623	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:53:00.564999104 CET	53	54623	1.1.1.1	192.168.2.4
Oct 28, 2024 17:53:00.566560984 CET	53	49332	1.1.1.1	192.168.2.4
Oct 28, 2024 17:53:10.483243942 CET	51868	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:53:10.487086058 CET	59873	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:53:10.495201111 CET	53	51868	1.1.1.1	192.168.2.4
Oct 28, 2024 17:53:10.498882055 CET	53	59873	1.1.1.1	192.168.2.4
Oct 28, 2024 17:53:10.499538898 CET	63686	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:53:10.510173082 CET	53	63686	1.1.1.1	192.168.2.4
Oct 28, 2024 17:53:10.523386002 CET	58373	53	192.168.2.4	1.1.1.1
Oct 28, 2024 17:53:10.523621082 CET	59684	53	192.168.2.4	8.8.8.8
Oct 28, 2024 17:53:10.531855106 CET	53	59684	8.8.8.8	192.168.2.4
Oct 28, 2024 17:53:10.532275915 CET	53	58373	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 17:51:58.323080063 CET	192.168.2.4	1.1.1.1	0x4ff0	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:58.323559999 CET	192.168.2.4	1.1.1.1	0x3334	Standard query (0)	erp.broadcom.net	65	IN (0x0001)	false
Oct 28, 2024 17:51:58.337186098 CET	192.168.2.4	1.1.1.1	0xc98e	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:58.484122038 CET	192.168.2.4	8.8.8.8	0x6f0	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:58.484458923 CET	192.168.2.4	1.1.1.1	0x11ed	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:59.487139940 CET	192.168.2.4	1.1.1.1	0x9678	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:59.487410069 CET	192.168.2.4	1.1.1.1	0xb3a0	Standard query (0)	erp.broadcom.net	65	IN (0x0001)	false
Oct 28, 2024 17:51:59.570842981 CET	192.168.2.4	1.1.1.1	0xfe07	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:59.571481943 CET	192.168.2.4	1.1.1.1	0xf0d9	Standard query (0)	erp.broadcom.net	65	IN (0x0001)	false
Oct 28, 2024 17:52:00.436568022 CET	192.168.2.4	1.1.1.1	0x161d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:00.436845064 CET	192.168.2.4	1.1.1.1	0xde5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 28, 2024 17:52:04.607836008 CET	192.168.2.4	1.1.1.1	0x5bee	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:04.608350039 CET	192.168.2.4	1.1.1.1	0xff55	Standard query (0)	erp.broadcom.net	65	IN (0x0001)	false
Oct 28, 2024 17:52:04.620807886 CET	192.168.2.4	1.1.1.1	0x174a	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:10.920723915 CET	192.168.2.4	1.1.1.1	0xe080	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:10.920943975 CET	192.168.2.4	1.1.1.1	0xddac	Standard query (0)	erp.broadcom.net	65	IN (0x0001)	false
Oct 28, 2024 17:52:10.938411951 CET	192.168.2.4	1.1.1.1	0x822d	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:10.962730885 CET	192.168.2.4	1.1.1.1	0xff59	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:10.963176966 CET	192.168.2.4	8.8.8.8	0x1aab	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:29.988531113 CET	192.168.2.4	1.1.1.1	0x29f1	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:40.979134083 CET	192.168.2.4	1.1.1.1	0x8565	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:40.979285955 CET	192.168.2.4	1.1.1.1	0x3bf1	Standard query (0)	erp.broadcom.net	65	IN (0x0001)	false
Oct 28, 2024 17:52:40.992798090 CET	192.168.2.4	1.1.1.1	0x6e38	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:53:00.556878090 CET	192.168.2.4	1.1.1.1	0xe447	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:53:00.557291031 CET	192.168.2.4	1.1.1.1	0xe765	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 28, 2024 17:53:10.483243942 CET	192.168.2.4	1.1.1.1	0xef93	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:53:10.487086058 CET	192.168.2.4	1.1.1.1	0x852f	Standard query (0)	erp.broadcom.net	65	IN (0x0001)	false
Oct 28, 2024 17:53:10.499538898 CET	192.168.2.4	1.1.1.1	0x8d33	Standard query (0)	erp.broadcom.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:53:10.523386002 CET	192.168.2.4	1.1.1.1	0x2746	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:53:10.523621082 CET	192.168.2.4	8.8.8.8	0x9c07	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 17:51:58.335896969 CET	1.1.1.1	192.168.2.4	0x4ff0	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:58.335983992 CET	1.1.1.1	192.168.2.4	0x3334	Name error (3)	erp.broadcom.net	none	none	65	IN (0x0001)	false
Oct 28, 2024 17:51:58.347147942 CET	1.1.1.1	192.168.2.4	0xc98e	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:58.493041992 CET	1.1.1.1	192.168.2.4	0x11ed	No error (0)	google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:58.493115902 CET	8.8.8.8	192.168.2.4	0x6f0	No error (0)	google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:59.497486115 CET	1.1.1.1	192.168.2.4	0x9678	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:51:59.498898029 CET	1.1.1.1	192.168.2.4	0xb3a0	Name error (3)	erp.broadcom.net	none	none	65	IN (0x0001)	false
Oct 28, 2024 17:51:59.584369898 CET	1.1.1.1	192.168.2.4	0xf0d9	Name error (3)	erp.broadcom.net	none	none	65	IN (0x0001)	false
Oct 28, 2024 17:51:59.586271048 CET	1.1.1.1	192.168.2.4	0xfe07	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:00.444529057 CET	1.1.1.1	192.168.2.4	0x161d	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:00.444545031 CET	1.1.1.1	192.168.2.4	0xde5	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 28, 2024 17:52:04.617538929 CET	1.1.1.1	192.168.2.4	0xff55	Name error (3)	erp.broadcom.net	none	none	65	IN (0x0001)	false
Oct 28, 2024 17:52:04.618202925 CET	1.1.1.1	192.168.2.4	0x5bee	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:04.630327940 CET	1.1.1.1	192.168.2.4	0x174a	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:10.667638063 CET	1.1.1.1	192.168.2.4	0x3e7a	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 17:52:10.667638063 CET	1.1.1.1	192.168.2.4	0x3e7a	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:10.667638063 CET	1.1.1.1	192.168.2.4	0x3e7a	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:10.934735060 CET	1.1.1.1	192.168.2.4	0xe080	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:10.937124014 CET	1.1.1.1	192.168.2.4	0xddac	Name error (3)	erp.broadcom.net	none	none	65	IN (0x0001)	false
Oct 28, 2024 17:52:10.949096918 CET	1.1.1.1	192.168.2.4	0x822d	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:10.970494032 CET	1.1.1.1	192.168.2.4	0xff59	No error (0)	google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:10.970814943 CET	8.8.8.8	192.168.2.4	0x1aab	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:29.998505116 CET	1.1.1.1	192.168.2.4	0x29f1	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:40.989250898 CET	1.1.1.1	192.168.2.4	0x8565	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:40.989435911 CET	1.1.1.1	192.168.2.4	0x3bf1	Name error (3)	erp.broadcom.net	none	none	65	IN (0x0001)	false
Oct 28, 2024 17:52:41.002811909 CET	1.1.1.1	192.168.2.4	0x6e38	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:46.646142006 CET	1.1.1.1	192.168.2.4	0x88e1	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 17:52:46.646142006 CET	1.1.1.1	192.168.2.4	0x88e1	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:57.286936045 CET	1.1.1.1	192.168.2.4	0x52eb	No error (0)	windowsupdatebg.s.llnwi.net		87.248.202.1	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:57.286936045 CET	1.1.1.1	192.168.2.4	0x52eb	No error (0)	windowsupdatebg.s.llnwi.net		178.79.208.1	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:52:58.690905094 CET	1.1.1.1	192.168.2.4	0xda6b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 17:52:58.690905094 CET	1.1.1.1	192.168.2.4	0xda6b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:53:00.564999104 CET	1.1.1.1	192.168.2.4	0xe765	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 28, 2024 17:53:00.566560984 CET	1.1.1.1	192.168.2.4	0xe447	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:53:10.495201111 CET	1.1.1.1	192.168.2.4	0xef93	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:53:10.498882055 CET	1.1.1.1	192.168.2.4	0x852f	Name error (3)	erp.broadcom.net	none	none	65	IN (0x0001)	false
Oct 28, 2024 17:53:10.510173082 CET	1.1.1.1	192.168.2.4	0x8d33	Name error (3)	erp.broadcom.net	none	none	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:53:10.531855106 CET	8.8.8.8	192.168.2.4	0x9c07	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 28, 2024 17:53:10.532275915 CET	1.1.1.1	192.168.2.4	0x2746	No error (0)	google.com		142.250.186.142	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:52:02 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 16:52:03 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=158565 Date: Mon, 28 Oct 2024 16:52:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:52:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 16:52:04 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=158618 Date: Mon, 28 Oct 2024 16:52:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-28 16:52:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.4	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:07 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:07 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:07 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5d69bbb7-d01e-008e-6d6a-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165307Z-17c5cb586f6zrq5bnguxgu7frc000000062g0000000075vm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:07 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:07 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:07 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 8f1f3dd8-601e-0097-4789-28f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165307Z-15b8d89586fhl2qtatrz3vfkf00000000b90000000008s9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:07 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:07 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:07 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:07 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: 7f75b738-501e-00a3-2941-29c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165307Z-16849878b786fl7gm2qg4r5y7000000005gg00000000m7c3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:07 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:07 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:07 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:07 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165307Z-16849878b78hh85qc40uyr8sc800000005kg00000000bq53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:07 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:07 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:07 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:07 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165307Z-16849878b78p8hrf1se7fucxk8000000062000000000suwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:07 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:08 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:08 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:08 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: c3a6d21e-601e-00ab-1dc6-2766f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165308Z-r197bdfb6b48pl4k4a912hk2g400000004m0000000000sy5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:08 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:08 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165308Z-16849878b78nx5sne3fztmu6xc00000006c00000000018zz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:08 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165308Z-17c5cb586f64v7xs992vpxwchg00000005eg000000002dzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:08 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:08 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 8abc48b9-201e-0096-2f4f-28ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165308Z-15b8d89586fdmfsg1u7xrpfws000000009hg000000007b12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:08 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:08 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165308Z-16849878b785dznd7xpawq9gcn00000006pg00000000e0ew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:09 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:09 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165309Z-16849878b78g2m84h2v9sta29000000004900000000040b9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:09 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:09 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:09 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 962f3e82-b01e-0070-52cb-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165309Z-r197bdfb6b47gqdjvmbpfaf2d000000000e0000000001tgc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:09 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:09 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 5271dd0b-801e-00a0-6eb7-282196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165309Z-r197bdfb6b4d9xksru4x6qbqr0000000056g00000000cwbv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:09 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:09 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165309Z-16849878b782d4lwcu6h6gmxnw00000004z000000000bygd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:09 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: b80877bf-b01e-0084-28e3-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165309Z-r197bdfb6b4bq7nf8dgr5rzeq400000000h0000000006ct2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:09 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7c0b2bc5-f01e-00aa-35ef-248521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165309Z-15b8d89586fdmfsg1u7xrpfws000000009kg0000000053c3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:09 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165310Z-15b8d89586fx2hlt035xdehq580000000pag000000001vg8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:09 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: d7829477-101e-008d-1890-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165310Z-r197bdfb6b4skzzvqpzzd3xetg00000004t0000000000kvx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:09 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165310Z-16849878b787bfsh7zgp804my4000000042g00000000chd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:09 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:10 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 860a7776-a01e-00ab-0afb-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165310Z-r197bdfb6b4qbfppwgs4nqza8000000003v000000000cqkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:10 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:10 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165310Z-16849878b787wpl5wqkt5731b400000006500000000010hh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:10 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:10 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165310Z-16849878b78smng4k6nq15r6s400000006ug000000009za5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:10 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:10 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165310Z-r197bdfb6b48pl4k4a912hk2g400000004m0000000000t2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:10 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:10 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b7bd549c-e01e-0003-5b3c-280fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165310Z-17c5cb586f6hn8cl90dxzu28kw0000000560000000007m8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:10 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:10 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165310Z-15b8d89586fmhkw429ba5n22m800000006qg000000004fw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:11 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:11 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:11 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 584104f8-c01e-008d-42fd-272eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165311Z-r197bdfb6b4bq7nf8dgr5rzeq400000000m0000000007nnf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:11 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:11 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:11 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165311Z-16849878b787wpl5wqkt5731b4000000060g00000000h4vx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:11 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: deaa19c2-701e-006f-33de-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165311Z-17c5cb586f6mkpfkkpsf1dpups00000000g0000000009cw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:11 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:11 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: afbd30f1-101e-007a-739c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165311Z-r197bdfb6b4skzzvqpzzd3xetg00000004n000000000asg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:11 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:11 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:11 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165311Z-16849878b7867ttgfbpnfxt44s000000051g00000000t2uf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:12 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:12 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:12 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165312Z-16849878b78qfbkc5yywmsbg0c00000004xg00000000hnev x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:12 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:12 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:12 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:12 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 892d3b27-201e-005d-7649-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165312Z-16849878b78q9m8bqvwuva4svc00000003tg00000000fphu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:12 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:12 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:12 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 25321125-401e-0047-18d5-288597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165312Z-r197bdfb6b47gqdjvmbpfaf2d000000000kg000000001b22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:12 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:12 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165312Z-16849878b78smng4k6nq15r6s400000006s000000000kzze x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:12 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:12 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165312Z-16849878b78qwx7pmw9x5fub1c00000003bg00000000qena x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:13 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:13 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:13 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165313Z-16849878b78q9m8bqvwuva4svc00000003tg00000000fpm1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:13 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:13 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:13 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165313Z-16849878b78qg9mlz11wgn0wcc00000004y00000000055g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:13 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:13 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:13 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:13 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165313Z-15b8d89586flspj6y6m5fk442w0000000b0000000000bu1e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:13 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:13 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:13 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165313Z-16849878b78z2wx67pvzz63kdg00000003x000000000cnt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:13 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:13 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e7cc90bd-401e-0029-032a-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165313Z-15b8d89586f8nxpt6ys645x5v000000006n00000000028zm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:13 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:14 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2eb4648-201e-0051-526d-287340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165314Z-r197bdfb6b4g24ztpxkw4umce800000006wg0000000049nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:14 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:14 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:14 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:14 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165314Z-16849878b78p49s6zkwt11bbkn0000000520000000000z00 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:14 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:14 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:14 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165314Z-16849878b78sx229w7g7at4nkg00000003mg0000000043kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:14 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:14 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:14 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:14 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f826faa8-301e-0099-1457-266683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165314Z-r197bdfb6b4b4pw6nr8czsrctg00000005w000000000dtbf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:14 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:14 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:14 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:14 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165314Z-16849878b78bjkl8dpep89pbgg000000040g00000000aax6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:14 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:15 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:15 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 62c536ba-f01e-003c-5995-278cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165315Z-r197bdfb6b4zd9tpkpdngrtchw00000004n00000000046hy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:15 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:15 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165315Z-16849878b7867ttgfbpnfxt44s000000056000000000a58u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:15 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165315Z-16849878b785dznd7xpawq9gcn00000006k000000000t9vr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:15 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165315Z-16849878b78p8hrf1se7fucxk8000000061g00000000up6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:16 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165316Z-16849878b7898p5f6vryaqvp58000000065g0000000079s5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:16 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165316Z-16849878b78wv88bk51myq5vxc00000005gg00000000n9p1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:16 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165316Z-16849878b786jv8w2kpaf5zkqs000000044g00000000fx8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:16 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165316Z-16849878b78tg5n42kspfr0x48000000057000000000qnz9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:16 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0697abc8-001e-00ad-714f-28554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165316Z-15b8d89586fx2hlt035xdehq580000000p900000000031cb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:16 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 9a8e6971-501e-0078-586f-2806cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165317Z-15b8d89586f6nn8zqg1h5suba800000000p0000000000ax6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:17 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165317Z-16849878b78fhxrnedubv5byks00000003m000000000gp7m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:17 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:17 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 0a5cb2df-e01e-0071-6f67-2708e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165317Z-r197bdfb6b4g24ztpxkw4umce800000006v00000000065g1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:17 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:17 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:17 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165317Z-16849878b78q9m8bqvwuva4svc00000003x0000000003a87 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:17 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:17 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:17 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4a7dd446-f01e-0096-5b9b-2710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165317Z-r197bdfb6b46krmwag4tzr9x7c000000051g000000008rxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:17 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:18 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c1144745-701e-0098-7f2c-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165318Z-r197bdfb6b48v72xb403uy6hns00000005tg00000000a4m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165318Z-16849878b787bfsh7zgp804my4000000042000000000edyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:18 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:18 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165318Z-16849878b78nx5sne3fztmu6xc00000006ag000000005ceh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:18 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165318Z-16849878b78p49s6zkwt11bbkn000000050000000000750e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:18 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165318Z-16849878b786jv8w2kpaf5zkqs0000000490000000001b72 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:18 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e1e6f089-901e-005b-1e15-262005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165319Z-15b8d89586f4zwgbgswvrvz4vs00000006k0000000006fwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:18 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165319Z-16849878b78bjkl8dpep89pbgg00000003zg00000000dg75 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:19 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: e1f5471d-e01e-0051-4f6c-2784b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165319Z-15b8d89586f6nn8zqg1h5suba800000000ng000000001auz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:19 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:19 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165319Z-16849878b7867ttgfbpnfxt44s000000051g00000000t3ks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:19 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:19 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 4ecf21c8-401e-002a-0558-26c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165319Z-17c5cb586f6zrq5bnguxgu7frc0000000650000000001ydu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:19 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165319Z-16849878b78wv88bk51myq5vxc00000005n0000000007bu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:19 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:20 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165319Z-15b8d89586f6nn8zqg1h5suba800000000mg000000003333 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:19 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:20 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 2fe3f320-d01e-0065-1a0d-29b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165320Z-r197bdfb6b42rt68rzg9338g1g00000006n0000000000bnb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 16:53:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:20 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dbd91de3-001e-002b-2827-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165320Z-r197bdfb6b46kmj4701qkq602400000004cg0000000036w1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 16:53:20 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 16:53:20 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 16:53:20 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T165320Z-15b8d89586flspj6y6m5fk442w0000000b1g00000000a2hu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 16:53:20 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6012, Parent PID: 1928

General

Target ID:	0
Start time:	12:51:51
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1448, Parent PID: 6012

General

Target ID:	2
Start time:	12:51:54
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2296,i,14942570135658488529,5959728580023110209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6272, Parent PID: 1928

General

Target ID:	3
Start time:	12:51:56
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://erp.broadcom.net:443/OA_MEDIA/broadcom_2.gif"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://erp.broadcom.net:443/OA_MEDIA/broadcom_2.gif

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6012, Parent PID: 1928

General

Chronological Activities

Analysis Process: chrome.exePID: 1448, Parent PID: 6012

General

Chronological Activities

Analysis Process: chrome.exePID: 6272, Parent PID: 1928

General

Chronological Activities

Disassembly

Windows Analysis Report
https://erp.broadcom.net:443/OA_MEDIA/broadcom_2.gif