Edit tour

Windows Analysis Report
https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9

Overview

General Information

Sample URL:	https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9
Analysis ID:	1544012
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2016,i,5069373808085024677,3499890254720357829,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6296 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://onedrive.live.com/edit?id=06196B45DC4479E7!474&resid=06196B45DC4479E7!474&ithint=onenote&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05&migratedtospo=true&wdo=2&cid=06196b45dc4479e7

HTTP Parser: Base64 decoded: https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9

Source: https://onedrive.live.com/error.html

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49809 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: onedrive.live.com to https://www.microsoft.com/microsoft-365/onedrive/online-cloud-storage

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9 HTTP/1.1Host: 1drv.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir?resid=06196B45DC4479E7!474&ithint=onenote&e=J67qxK-KfEurqpMk0dasTw&at=9&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05 HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /edit?id=06196B45DC4479E7!474&resid=06196B45DC4479E7!474&ithint=onenote&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05&migratedtospo=true&wdo=2&cid=06196b45dc4479e7 HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: E=P:62XqVXL33Ig=:VqvC1jqIACslm1EiZmC/w1L0JzuVT0Ci0sfYTRn7CXc=:F; xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; xidseq=1
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v1.0/token HTTP/1.1Host: api-badgerp.svc.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_api/v2.0/drives/06196B45DC4479E7/items/06196B45DC4479E7!474?action=edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault HTTP/1.1Host: my.microsoftpersonalcontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonPrefer: Include-Feature=AddToOneDrive;Vaultsec-ch-ua-mobile: ?0Authorization: Badger eyJhbGciOiJSUzI1NiIsImtpZCI6IkQ3MjlBRDlFQjZFNTRCMjcxMkUxNjUwRkIzQ0Q0Qzk3Q0JFOEJBMTciLCJ4NXQiOiIxeW10bnJibFN5Y1M0V1VQczgxTWw4dm91aGMiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzMwNzM5NzY5LCJuYmYiOjE3MzAxMzQ5NjksImdpdmVuX25hbWUiOiI3MSIsImZhbWlseV9uYW1lIjoiUGFycm90IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTlkODNmYTcyODBlODA2MjJlODcxMmZiNjljNjY2MjYiLCJhcHBpZCI6IjAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDA0ODE3MTBhNCIsImlhdCI6MTczMDEzNDk2OX0.i-5BVxWXbHWXym_MsrDA0ByVJ1Rl8K1R3i36VdK_Q4NjcXX6ZE1cSb7RsgxliBoR4q58qikPLPFFogzp_0upLGtDYlalH7cv6QsuhlX7-AiCSc3kZdRlA4UifCYgnv_YqtCXTGXmdptH_OIL1udyGWdAHrDZlrDaF9kYuQs-V1OAHY6lELVw59izfsV9JXKydCqdILPNMZP9JFips4VbqF_IyU9eBTMTMKQ4-p_vLHulItIY9YxcT1K24__BeDFFsh3NxZRTSOqnlU174JH9tI6tXqGifWpfmHUTxi_6G_pYUkM2S-QrpuLTRrLGYwkAqmY1WgJE0bDJcvzYYT_1AAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://onedrive.live.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://onedrive.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /error.html HTTP/1.1Host: onedrive.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://onedrive.live.com/edit?id=06196B45DC4479E7!474&resid=06196B45DC4479E7!474&ithint=onenote&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05&migratedtospo=true&wdo=2&cid=06196b45dc4479e7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; E=P:HfF4VnL33Ig=:2JsJZpPfsGhZX96s5EPeMxT0dJfy7Bg0GCDdwFFH7c0=:F; xidseq=2; wla42=; MicrosoftApplicationsTelemetryDeviceId=1a7f5863-c448-40da-86e0-289f951f961f; ai_session=uE9OGgpaV/nrr1mAdEyp/g\|1730134968491\|1730134968491; MSFPC=GUID=c60a864d5fb6486f8d20ee0df16f5645&HASH=c60a&LV=202410&V=4&LU=1730134974401
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: onedrive.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onedrive.live.com/error.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; xidseq=2; wla42=; MicrosoftApplicationsTelemetryDeviceId=1a7f5863-c448-40da-86e0-289f951f961f; MSFPC=GUID=c60a864d5fb6486f8d20ee0df16f5645&HASH=c60a&LV=202410&V=4&LU=1730134974401; ai_session=uE9OGgpaV/nrr1mAdEyp/g\|1730134968491\|1730134974902; E=P:1364XnL33Ig=:5QrreAH5G0PDRUdo8U6WCO6XWF4w4wgX+zTLGtR8gHk=:F
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; xidseq=2; wla42=; MicrosoftApplicationsTelemetryDeviceId=1a7f5863-c448-40da-86e0-289f951f961f; MSFPC=GUID=c60a864d5fb6486f8d20ee0df16f5645&HASH=c60a&LV=202410&V=4&LU=1730134974401; ai_session=uE9OGgpaV/nrr1mAdEyp/g\|1730134968491\|1730134974902; E=P:kgc7X3L33Ig=:3CEd/hZxiyXKMs9dQp1R2YYp7XsC06/+kc8XBunj5Js=:F
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/Logout_Core_BN_5ext0CSrr58V8ZQYCVw2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?lc=1033 HTTP/1.1Host: onedrive.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; xidseq=2; wla42=; MicrosoftApplicationsTelemetryDeviceId=1a7f5863-c448-40da-86e0-289f951f961f; MSFPC=GUID=c60a864d5fb6486f8d20ee0df16f5645&HASH=c60a&LV=202410&V=4&LU=1730134974401; ai_session=uE9OGgpaV/nrr1mAdEyp/g\|1730134968491\|1730134974902; E=P:AxnSX3L33Ig=:YM8j56mJteJ5O5JerX/OmnRMJq9jhPSdIAHQLYBbDM8=:F
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/Logout_Core_BN_5ext0CSrr58V8ZQYCVw2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: 1drv.ms
Source: global traffic	DNS traffic detected: DNS query: onedrive.live.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api-badgerp.svc.ms
Source: global traffic	DNS traffic detected: DNS query: p.sfx.ms
Source: global traffic	DNS traffic detected: DNS query: my.microsoftpersonalcontent.com
Source: global traffic	DNS traffic detected: DNS query: spo.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: assets.onestore.ms
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com

Source: unknown

HTTP traffic detected: POST /v1.0/token HTTP/1.1Host: api-badgerp.svc.msConnection: keep-aliveContent-Length: 48sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://onedrive.live.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://onedrive.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, no-storePragma: no-cacheTransfer-Encoding: chunkedContent-Type: application/json;odata.metadata=minimal;odata.streaming=true;IEEE754Compatible=false;charset=utf-8Expires: -1P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"X-NetworkStatistics: 0,525568,0,0,8277,0,49702,50Access-Control-Allow-Origin: Access-Control-Max-Age: 2592000Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Type, Content-Version, CTag, ETag, Location, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After, spclientservicerequestduration, SPRequestDuration, SPRequestGuid, Timing-Allow-Origin, Transfer-Encoding, WWW-Authenticate, X-Fluid-Epoch, X-Fluid-Retries, X-Fluid-SLTelemetry, X-Fluid-Telemetry, X-MoveState, x-ms-diagnostics, Reauthid, X-Cache-Origin, X-MSEdge-Ref, X-ErrorCode, X-Errorsource, X-ErrortypeX-SharePointHealthScore: 1X-SP-SERVERSTATE: ReadOnly=0ODATA-VERSION: 4.0SPClientServiceRequestDuration: 16SPRequestDuration: 17X-AspNet-Version: 4.0.30319X-DataBoundary: NONEX-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/SPRequestGuid: 17645ea1-100f-6000-c3ae-5b511492c285request-id: 17645ea1-100f-6000-c3ae-5b511492c285MS-CV: oV5kFw8QAGDDrltRFJLChQ.0Alt-Svc: h3=":443";ma=86400Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=9188040d-6c67-4c5b-b112-36a304b66dad&destinationEndpoint=Edge-Prod-SN1r5a&frontEnd=AFD&RemoteIP=155.94.241.0"}]}NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0}Strict-Transport-Security: max-age=31536000X-FRAME-OPTIONS: SAMEORIGINContent-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;X-Powered-By: ASP.NETMicrosoftSharePointTeamServices: 16.0.0.25409X-Content-Type-Options: nosniffX-MS-InvokeApp: 1; RequireReadOnlyX-Cache: CONFIG_NOCACHEX-MSEdge-Ref: Ref A: C34251555CE04B178590CE49A8C93864 Ref B: SN1EDGE2008 Ref C: 2024-10-28T17:02:52ZDate: Mon, 28 Oct 2024 17:02:51 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: no-cache, no-storePragma: no-cacheTransfer-Encoding: chunkedContent-Type: application/json;charset=utf-8Expires: -1P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"X-NetworkStatistics: 0,525568,0,0,233,0,26332,106Access-Control-Allow-Origin: Access-Control-Max-Age: 2592000Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Type, Content-Version, CTag, ETag, Location, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After, spclientservicerequestduration, SPRequestDuration, SPRequestGuid, Timing-Allow-Origin, Transfer-Encoding, WWW-Authenticate, X-Fluid-Epoch, X-Fluid-Retries, X-Fluid-SLTelemetry, X-Fluid-Telemetry, X-MoveState, x-ms-diagnostics, Reauthid, X-Cache-Origin, X-MSEdge-Ref, X-ErrorCode, X-Errorsource, X-ErrortypeX-SharePointHealthScore: 2X-SP-SERVERSTATE: ReadOnly=0ODATA-VERSION: 4.0SPClientServiceRequestDuration: 34SPRequestDuration: 34X-AspNet-Version: 4.0.30319X-DataBoundary: EUX-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0SPRequestGuid: 17645ea1-30c9-a000-2465-120b79b29b9drequest-id: 17645ea1-30c9-a000-2465-120b79b29b9dMS-CV: oV5kF8kwAKAkZRILebKbnQ.0Alt-Svc: h3=":443";ma=86400Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=9188040d-6c67-4c5b-b112-36a304b66dad&destinationEndpoint=Edge-Prod-SN1r5a&frontEnd=AFD&RemoteIP=155.94.241.0"}]}NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0}Strict-Transport-Security: max-age=31536000X-FRAME-OPTIONS: SAMEORIGINContent-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com;X-Powered-By: ASP.NETMicrosoftSharePointTeamServices: 16.0.0.25409X-Content-Type-Options: nosniffX-MS-InvokeApp: 1; RequireReadOnlyX-Cache: CONFIG_NOCACHEX-MSEdge-Ref: Ref A: 194CB13701554D85935EDDDEEEAA9631 Ref B: SN1EDGE2010 Ref C: 2024-10-28T17:02:55ZDate: Mon, 28 Oct 2024 17:02:55 GMTConnection: close

Source: chromecache_80.2.dr, chromecache_66.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_67.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_67.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Source: chromecache_67.2.dr	String found in binary or memory: https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c
Source: chromecache_67.2.dr	String found in binary or memory: https://az725175.vo.msecnd.net/scripts/jsll-4.js
Source: chromecache_67.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: chromecache_75.2.dr, chromecache_72.2.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: chromecache_67.2.dr	String found in binary or memory: https://onedrive.live.com/about/en-us/
Source: chromecache_67.2.dr	String found in binary or memory: https://outlook.live.com/owa/
Source: chromecache_67.2.dr	String found in binary or memory: https://products.office.com/en-us/home
Source: chromecache_67.2.dr	String found in binary or memory: https://products.office.com/en-us/microsoft-teams/free?icid=SSM_AS_Promo_Apps_MicrosoftTeams
Source: chromecache_72.2.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_67.2.dr	String found in binary or memory: https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Source: chromecache_67.2.dr	String found in binary or memory: https://www.onenote.com/
Source: chromecache_67.2.dr	String found in binary or memory: https://www.skype.com/en/
Source: chromecache_67.2.dr	String found in binary or memory: https://www.xbox.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49809 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@18/42@38/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2016,i,5069373808085024677,3499890254720357829,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2016,i,5069373808085024677,3499890254720357829,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://schema.org/Organization	0%	URL Reputation	safe
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js	0%	URL Reputation	safe
https://reactjs.org/link/react-polyfills	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spov-0006.spov-msedge.net	13.107.137.11	true	false	unknown
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
s-part-0036.t-0009.t-msedge.net	13.107.246.64	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
1drv.ms	13.107.42.12	true	false	unknown
my.microsoftpersonalcontent.com	unknown	unknown	false	unknown
c.s-microsoft.com	unknown	unknown	false	unknown
onedrive.live.com	unknown	unknown	false	unknown
api-badgerp.svc.ms	unknown	unknown	false	unknown
p.sfx.ms	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
assets.onestore.ms	unknown	unknown	false	unknown
ajax.aspnetcdn.com	unknown	unknown	false	unknown
acctcdn.msftauth.net	unknown	unknown	false	unknown
spo.nel.measure.office.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://onedrive.live.com/error.html	false	unknown
https://my.microsoftpersonalcontent.com/_api/v2.0/drives/06196B45DC4479E7/items/06196B45DC4479E7!474?action=edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault	false	unknown
https://onedrive.live.com/favicon.ico	false	unknown
https://my.microsoftpersonalcontent.com/_api/v2.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05/driveItem?action=Edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault	false	unknown
https://onedrive.live.com/redir?resid=06196B45DC4479E7!474&ithint=onenote&e=J67qxK-KfEurqpMk0dasTw&at=9&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05	false	unknown
https://logincdn.msftauth.net/16.000/content/js/Logout_Core_BN_5ext0CSrr58V8ZQYCVw2.js	false	unknown
https://onedrive.live.com/edit?id=06196B45DC4479E7!474&resid=06196B45DC4479E7!474&ithint=onenote&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05&migratedtospo=true&wdo=2&cid=06196b45dc4479e7	false	unknown
https://api-badgerp.svc.ms/v1.0/token	false	unknown
https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9	true	unknown
https://onedrive.live.com/?lc=1033	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://onedrive.live.com/about/en-us/	chromecache_67.2.dr	false		unknown
https://outlook.live.com/owa/	chromecache_67.2.dr	false		unknown
https://products.office.com/en-us/microsoft-teams/free?icid=SSM_AS_Promo_Apps_MicrosoftTeams	chromecache_67.2.dr	false		unknown
https://www.onenote.com/	chromecache_67.2.dr	false		unknown
https://my.microsoftpersonalcontent.com	chromecache_75.2.dr, chromecache_72.2.dr	false		unknown
https://www.skype.com/en/	chromecache_67.2.dr	false		unknown
https://products.office.com/en-us/home	chromecache_67.2.dr	false		unknown
https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c	chromecache_67.2.dr	false		unknown
https://www.xbox.com/	chromecache_67.2.dr	false		unknown
http://schema.org/Organization	chromecache_67.2.dr	false	URL Reputation: safe	unknown
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js	chromecache_67.2.dr	false	URL Reputation: safe	unknown
http://github.com/requirejs/almond/LICENSE	chromecache_80.2.dr, chromecache_66.2.dr	false		unknown
https://reactjs.org/link/react-polyfills	chromecache_72.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.139.11	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.137.11	dual-spov-0006.spov-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
13.107.42.12	1drv.ms	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.17
192.168.2.4
192.168.2.23

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544012
Start date and time:	2024-10-28 18:01:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@18/42@38/11

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 142.250.186.78, 66.102.1.84, 34.104.35.123, 23.38.98.102, 23.38.98.104, 23.38.98.84, 23.38.98.96, 20.101.246.164, 172.202.163.200, 52.168.117.175, 2.19.126.163, 2.19.126.137, 2.16.168.12, 2.16.168.7, 52.182.143.211, 192.229.221.95, 40.69.42.241, 13.95.31.18, 40.126.32.74, 20.190.160.14, 40.126.32.76, 40.126.32.72, 40.126.32.134, 40.126.32.138, 40.126.32.68, 20.190.160.22, 88.221.169.152, 104.102.41.166, 2.16.164.41, 2.16.164.105, 152.199.19.160, 104.124.11.201, 104.124.11.146, 184.28.89.233, 172.217.18.3, 2.19.126.143, 2.19.126.146
Excluded domains from analysis (whitelisted): odwebp.trafficmanager.net, azurefd-t-fb-prod.trafficmanager.net, lgincdnmsftuswe2.azureedge.net, assets.onestore.ms.edgekey.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, res-1.cdn.office.net, browser.events.data.trafficmanager.net, a767.dspw65.akamai.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, login.live.com, update.googleapis.com, acctcdnvzeuno.azureedge.net, wu-b-net.trafficmanager.net, a1778.g2.akamai.net, acctcdnvzeuno.ec.azureedge.net, e10583.dspg.akamaiedge.net, e40491.dscg.akamaiedge.net, fs.microsoft.com, acctcdnmsftuswe2.azureedge.net, wise.public.cdn.office.net, www.tm.v4.a.prd.aadg.akadns.net, lgincdnvzeuno.ec.azureedge.net, onedscolprdeus19.eastus.cloudapp.azure.com, statics-marketingsites-wcus-ms-com.akamaized.net, assets.onestore.ms.akadns.net, c-s.cms.ms.akadns.net, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, res-prod.trafficmanager.net, owamail.public.cd
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65476)
Category:	dropped
Size (bytes):	131576
Entropy (8bit):	5.3336550696173
Encrypted:	false
SSDEEP:	1536:WlHzBSZuu6aG6ePs15sqsDCNjiei7NmZuuJizS84Rb/KZAeLh:WlY676ePcegjiX7Nmxn9bKeeV
MD5:	3B09284824C13B8CDC6961C0E67F3882
SHA1:	D3E3DA90328D47BB43887CE0FA6176C936082B43
SHA-256:	6D3D61BC8A71041247CFB1C1CB8A7072CC3030B020B9F43845662EF1A05FA161
SHA-512:	DC7CF432825E9B99DDC25E432DB1DB6A13DCB98AB4C1F844ADF478307783D76E06173D64E960972FE7967DD8F013D913AB5F829C0CF38450D1F685195667EA97
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 13.js.LICENSE.txt /."use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[13],{223:(e,t,n)=>{n.r(t),n.d(t,{_InMemoryPropertyStorage:()=>ss,_OneDSLogger:()=>os,_SanitizerIds:()=>Fo.a,_getDefaultScrubberConfig:()=>ns.a});var a=n(0),i="function",r="object",o="undefined",s=Object,c=s.prototype,d=s.assign,l=s.create,u=s.defineProperty,f=c.hasOwnProperty,p=null;function m(e){void 0===e&&(e=!0);var t=!1===e?null:p;return t\|\|(typeof globalThis!==o&&(t=globalThis),t\|\|typeof self===o\|\|(t=self),t\|\|typeof window===o\|\|(t=window),t\|\|typeof n.g===o\|\|(t=n.g),p=t),t}function _(e){throw new TypeError(e)}function h(e){if(l)return l(e);if(null==e)return{};var t=typeof e;function n(){}return t!==r&&t!==i&&_("Object prototype may only be an Object:"+e),n.prototype=e,new n}(m()\|\|{}).Symbol,(m()\|\|{}).Reflect;var b,g=function(e,t){return g=s.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513), with no line terminators
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	5.350826451115093
Encrypted:	false
SSDEEP:	12:D0rdkqmKlO30kMWznLPQspwlZpqBijDgrgLCpWRG3a0:exmwOkkMWIvv4ELsWUp
MD5:	602C381194795DFC124FACDF48492EF1
SHA1:	90D594B7B5AF217824F2974514548C95FECFBFA5
SHA-256:	BF450798FB52E2458A1E10749577E5334F3E1D7907A47FDFEA5430CB71FA19E6
SHA-512:	8837F6BD2A11387D31A866D07B66A0FF2E58D2EDC2682A582919A1896CE9B4CB683A795D91968B41FA46C31CE62D34414E1F3318D4F5DDA2999447F4BCA6133D
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/en-us/CMSScripts/script.jsx?k=f65ecb70-094d-0b11-7c9d-7da1bcadfaa7
Preview:	var jsllConfig={useDefaultContentName:!0,syncMuid:!0,authMethod:AUTHMETHOD,isLoggedIn:ISLOGGEDIN===undefined\|\|ISLOGGEDIN!=="True"?!1:!0,muidDomain:MUIDDOMAIN\|\|"microsoft.com",useShortNameForContentBlob:!1,autoCapture:{pageView:!0,onLoad:!0,onUnload:!0,click:!0,scroll:!0,resize:!0,lineage:!0,jsError:!0,addin:!0,perf:!0},coreData:{appId:JSLLAPPID,market:LOCALE,pageName:PAGENAME,pageType:PAYLOADTYPE,referrerUri:document.referrer,requestUri:window.location.href},callback:{pageName:PAGENAME}};awa.init(jsllConfig)

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (351)
Category:	dropped
Size (bytes):	867
Entropy (8bit):	5.022371014336119
Encrypted:	false
SSDEEP:	12:+yrNYyZevXo5+fY50zRrmNJiN0vm5XqK64crwkQfFBTxKzLEkQfFMxvTdO+kQfVK:FBYKem+fY5IUJQX9c0hF4TdO2/sX
MD5:	508D5DDAE99658C5DADBDD91124580F2
SHA1:	757E67BBD709A1DC061F88105AB69A99012908AA
SHA-256:	56A5A66F6804BA58C32736A87B1DB8CE78B66A5C4F91F21E753B866CF7CE6BA6
SHA-512:	03AE7ADC4FC4B4BC62B01B2853D796650AB3993D4140252856BA4B52E0D52705A5FE5B9D4F970131B6FDCC47D4DFBDF5C93D6CC9648E3BB3142DE09B65C86B24
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["initial.resx"],{186:e=>{e.exports=JSON.parse('{"a":"My files"}')}.,180:e=>{e.exports=JSON.parse('{"m":"Open in Word","h":"Open in Project","b":"Open in Excel","g":"Open in PowerPoint","e":"Open in OneNote","k":"Open in Visio","i":"Open in Publisher","c":"Open in InfoPath","l":"Open in Word Online","f":"Open in PowerPoint Online","a":"Open in Excel Online","d":"Open in OneNote Online","j":"Open in Visio Online"}')}.,205:e=>{e.exports=JSON.parse('{"c":"Still here?","a":"For your security, Personal Vault will automatically lock in 1 minute.","b":"Keep unlocked","f":"Personal Vault didn\\u0027t lock","d":"There was a problem locking your Personal Vault. If this happens again, you can sign out of OneDrive to lock your Personal Vault","e":"Retry"}')}.}]),define("initial.resx",[],{});

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.1280056112498884
Encrypted:	false
SSDEEP:	24:i7xEfZFssEcdSsssss9udddSsssssss8VpddddSssssssssss4cddddddysssssF:gu6sOwH0/lO9dL/FLRBwwkKK1V
MD5:	604ADFB53677B5CA4F910FFB131B3E7C
SHA1:	5F1A0FB4E4AD3707E591CE16352158263488ED70
SHA-256:	24638331466A52BB66F912090E7A9CC9E3DF2236E39C187C9409104526B472B0
SHA-512:	35F618F42ADFEE6D1335C67F729C298789419FE2930371A91683F60481794488DFAF15B572E6FC1BE70833EF12DFE57432725F6336B6B73DCFB52596F57F30A5
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................(`.(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(p.....................

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513), with no line terminators
Category:	dropped
Size (bytes):	513
Entropy (8bit):	5.350826451115093
Encrypted:	false
SSDEEP:	12:D0rdkqmKlO30kMWznLPQspwlZpqBijDgrgLCpWRG3a0:exmwOkkMWIvv4ELsWUp
MD5:	602C381194795DFC124FACDF48492EF1
SHA1:	90D594B7B5AF217824F2974514548C95FECFBFA5
SHA-256:	BF450798FB52E2458A1E10749577E5334F3E1D7907A47FDFEA5430CB71FA19E6
SHA-512:	8837F6BD2A11387D31A866D07B66A0FF2E58D2EDC2682A582919A1896CE9B4CB683A795D91968B41FA46C31CE62D34414E1F3318D4F5DDA2999447F4BCA6133D
Malicious:	false
Reputation:	low
Preview:	var jsllConfig={useDefaultContentName:!0,syncMuid:!0,authMethod:AUTHMETHOD,isLoggedIn:ISLOGGEDIN===undefined\|\|ISLOGGEDIN!=="True"?!1:!0,muidDomain:MUIDDOMAIN\|\|"microsoft.com",useShortNameForContentBlob:!1,autoCapture:{pageView:!0,onLoad:!0,onUnload:!0,click:!0,scroll:!0,resize:!0,lineage:!0,jsError:!0,addin:!0,perf:!0},coreData:{appId:JSLLAPPID,market:LOCALE,pageName:PAGENAME,pageType:PAYLOADTYPE,referrerUri:document.referrer,requestUri:window.location.href},callback:{pageName:PAGENAME}};awa.init(jsllConfig)

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41651)
Category:	dropped
Size (bytes):	131537
Entropy (8bit):	5.2237799798561975
Encrypted:	false
SSDEEP:	3072:1f/HuF3CpxEIqQ0/9d1EwgXAnKxnKKviV:1f/HuZ1ILGV
MD5:	30B7C335C62E5269E2D35B8E8B9F44B4
SHA1:	C6D92B1516EB8F6D44AAF171FB24A1B2AADD0C4C
SHA-256:	10733A5D876108F81C5F78EEE5C9760A739D89C52FA6180C4290B7F909F24346
SHA-512:	5BCE247C84C88F993A857CE2F1E8540C648672DEB6D92A55BC808C33394B784C52866D635BEC8B7CD5E62A7EA4109569AC8BCD1381571B84592ACD6C5901D7A8
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (955), with CRLF line terminators
Category:	downloaded
Size (bytes):	201253
Entropy (8bit):	2.661810841903416
Encrypted:	false
SSDEEP:	768:W7nJSq9GinOo20uqxjr3+AKyKEAPNPPn8P9R/3htzAVT+JcYY5WRItsWc7rQ3S01:WHGiOoHuOjr3+AKyKAXS
MD5:	85DE642E1467807F64F7E10807DF3869
SHA1:	C795B490811C0E5A1A8F3C3F620AAB9F00C34F07
SHA-256:	5965B2C5472AACA1CD66EA5B0D07A971B961FEE72FC27EB1F6C760042084B21B
SHA-512:	BF4EC56D6FC54EAAFBD57C4E4D06900D358E39CE15009FB983491B0A83ABB60A0A54F46BE86387AB837B4AE1D1F3FF99156D04207065B0F65F165B54CFAAF47B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/microsoft-365/onedrive/online-cloud-storage
Preview:	..<!DOCTYPE html><html xmlns:mscom="http://schemas.microsoft.com/CMSvNext".. xmlns:md="http://schemas.microsoft.com/mscom-data" lang="en-us".. xmlns="http://www.w3.org/1999/xhtml"><head><link rel="shortcut icon".. href="//www.microsoft.com/favicon.ico?v2" /><link.. type="text/css" rel="stylesheet".. href="https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css".. /><title>Your request has been blocked. This could be.. due to several reasons.</title><meta name="Title".. content="We are sorry, the page you requested cannot be.. found" /><meta name="CorrelationVector".. content="VbLZYbRlhU2hyedN.1" /><meta name="Description".. content="" /><meta name="MscomContentLocale".. content="en-us" /><meta name="

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.1280056112498884
Encrypted:	false
SSDEEP:	24:i7xEfZFssEcdSsssss9udddSsssssss8VpddddSssssssssss4cddddddysssssF:gu6sOwH0/lO9dL/FLRBwwkKK1V
MD5:	604ADFB53677B5CA4F910FFB131B3E7C
SHA1:	5F1A0FB4E4AD3707E591CE16352158263488ED70
SHA-256:	24638331466A52BB66F912090E7A9CC9E3DF2236E39C187C9409104526B472B0
SHA-512:	35F618F42ADFEE6D1335C67F729C298789419FE2930371A91683F60481794488DFAF15B572E6FC1BE70833EF12DFE57432725F6336B6B73DCFB52596F57F30A5
Malicious:	false
Reputation:	low
URL:	https://p.sfx.ms/images/favicon.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................(`.(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(p.....................

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40671), with no line terminators
Category:	downloaded
Size (bytes):	40671
Entropy (8bit):	5.568398329756874
Encrypted:	false
SSDEEP:	768:ThGmx33aPq7uFa9tzXm+QJXeBD3j/BvG0+s+UjUNPwCo3GVGpr8/ijJC:df3aYuFarzXmT6a02OdjJC
MD5:	04DFF97B1B74092AEBE7C57C65060257
SHA1:	7C12B096805BEC183A2C6A4DB24338601F85F201
SHA-256:	930F0EE3B959031A5AB3D01E7A242759F84FE654CB4306B1EF0965D514A800CA
SHA-512:	4DDE114E32A2542782254E147AD123771C685ABBF9C98D8F72D8C73D579575318F2CA6A48D069F65BBF24840FB44C7A5A9A1FDE08F2EE59A96A7D96A639F985C
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/16.000/content/js/Logout_Core_BN_5ext0CSrr58V8ZQYCVw2.js
Preview:	var $G={_rX:"113",_oq:"127",_oU:"50",_ou:"4",TrustedPCNameMaxLengthString:"63",_p8:"7",$aJ:"8",SAOTCMaxAcceptedLengthString:"10",UseDifferentOptionValue:"UseDifferent",_ry:"username",_or:"pcexp",XboxQS:"xbx",_m7:"mkt",_lU:"lc",SiteIdQS:"id"},$t={_ep:0,_lB:1,_rD:8,_c3:16},$z={_h0:function(a){if(_hX(a)&&a!=$z._i&&a!=$z._cC)return true;return false},_i:"",_cC:"0",_lD:10,InvalidIfExistsLogin:11,_ao:1e3,_bi:1001,_ks:1002,_cs:1005,_oT:1006,_p7:1007,_oo:1009,_oO:1010,_nj:1013,_oS:1015,FedUser:1016,FedUserConflict:1017,FedUserInviteBlocked:1018,_bC:1020,_ot:1021,AutoVerifyNoCodeSent:1022,_pM:1023,_pn:1024,_rM:1025,_qD:1026,PhoneNumberInvalid:1027,PhoneFormattingInvalid:1028,_6:9999,PP_E_DB_MEMBERDOESNOTEXIST:"CFFFFC15",PP_E_EXCLUDED:"80041010",PP_E_MEMBER_LOCKED:"80041011",_am:"80041012",_a3:"80041031",_br:"80041032",_aM:"800478AC",_bS:"8004490C",_o5:"80045801",_o8:"80045806",_o7:"80045807",_o6:"80045800",_o9:"80041100",_oy:"8004110D",_oY:"8004110B",_pa:"80041101",_an:"80041103",_pC:"80041120"

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49535)
Category:	dropped
Size (bytes):	772777
Entropy (8bit):	5.359301422886437
Encrypted:	false
SSDEEP:	12288:agx87ONuSyGFHJQ9qIslXuAIp6f2/eYHc8CWaYqLy:lqZGFHJQ9qIsFuAIkejc8C0
MD5:	C6D77B4F01A5CD71C41C5AC1367CAA94
SHA1:	6BF37C89FDE94FE2ABECBFF6930D8540FC8381DB
SHA-256:	1DF5CD4A9E8FF36C38EE1D69054EC658B1033DD70CDFA8FBE00035240BADBC2F
SHA-512:	C4F867AA464E90F3BC06707A16B4CCCF3F592ED95BD9204BD95F7DFF09225627AE90749C41E2D4C6DFBE689F1DB8F944B3099F5B8464C2CEF15F0CC854364575
Malicious:	false
Reputation:	low
Preview:	/! For license information please see wacodcowlhostwebpack.js.LICENSE.txt /.var __webpack_result__;(()=>{var e=[(e,t,n)=>{"use strict";n.d(t,{a:()=>r,b:()=>c,c:()=>s,d:()=>i,e:()=>d,f:()=>o,g:()=>l});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}a(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var r=function(){return r=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},r.apply(this,arguments)};function o(e,t){var n={};for(var a in e)Object.prototype.hasOwnProperty.call(e,a)&&t.indexOf(a)<0&&(n[a]=e[a]);if(null!=e&&"function"=

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	15
Entropy (8bit):	3.189898095464287
Encrypted:	false
SSDEEP:	3:Uh1Kn:UDKn
MD5:	39A19D0882684989864FA50BCED6A2D1
SHA1:	5CED55DAC2E0427E9DC605CEC1FEDAB0949EB15E
SHA-256:	8FBEDED073249C3611742297EE96A976A95EE113F33B9A422A5D3A7A2DEB63E5
SHA-512:	E795CB7DE27B42948B7DDFF19F3B401A8F95753AC7D37D9B5F52D8DACD2AA43A2AD9EACEC29F77D28080E20C21C48B9FA88A733FAC108939FB2F0EB036C7AEEE
Malicious:	false
Reputation:	low
URL:	https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Preview:	/* empty css */

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	dropped
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49535)
Category:	downloaded
Size (bytes):	772777
Entropy (8bit):	5.359301422886437
Encrypted:	false
SSDEEP:	12288:agx87ONuSyGFHJQ9qIslXuAIp6f2/eYHc8CWaYqLy:lqZGFHJQ9qIsFuAIkejc8C0
MD5:	C6D77B4F01A5CD71C41C5AC1367CAA94
SHA1:	6BF37C89FDE94FE2ABECBFF6930D8540FC8381DB
SHA-256:	1DF5CD4A9E8FF36C38EE1D69054EC658B1033DD70CDFA8FBE00035240BADBC2F
SHA-512:	C4F867AA464E90F3BC06707A16B4CCCF3F592ED95BD9204BD95F7DFF09225627AE90749C41E2D4C6DFBE689F1DB8F944B3099F5B8464C2CEF15F0CC854364575
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.010/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
Preview:	/! For license information please see wacodcowlhostwebpack.js.LICENSE.txt /.var __webpack_result__;(()=>{var e=[(e,t,n)=>{"use strict";n.d(t,{a:()=>r,b:()=>c,c:()=>s,d:()=>i,e:()=>d,f:()=>o,g:()=>l});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}a(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var r=function(){return r=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},r.apply(this,arguments)};function o(e,t){var n={};for(var a in e)Object.prototype.hasOwnProperty.call(e,a)&&t.indexOf(a)<0&&(n[a]=e[a]);if(null!=e&&"function"=

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (351)
Category:	downloaded
Size (bytes):	867
Entropy (8bit):	5.022371014336119
Encrypted:	false
SSDEEP:	12:+yrNYyZevXo5+fY50zRrmNJiN0vm5XqK64crwkQfFBTxKzLEkQfFMxvTdO+kQfVK:FBYKem+fY5IUJQX9c0hF4TdO2/sX
MD5:	508D5DDAE99658C5DADBDD91124580F2
SHA1:	757E67BBD709A1DC061F88105AB69A99012908AA
SHA-256:	56A5A66F6804BA58C32736A87B1DB8CE78B66A5C4F91F21E753B866CF7CE6BA6
SHA-512:	03AE7ADC4FC4B4BC62B01B2853D796650AB3993D4140252856BA4B52E0D52705A5FE5B9D4F970131B6FDCC47D4DFBDF5C93D6CC9648E3BB3142DE09B65C86B24
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.010/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["initial.resx"],{186:e=>{e.exports=JSON.parse('{"a":"My files"}')}.,180:e=>{e.exports=JSON.parse('{"m":"Open in Word","h":"Open in Project","b":"Open in Excel","g":"Open in PowerPoint","e":"Open in OneNote","k":"Open in Visio","i":"Open in Publisher","c":"Open in InfoPath","l":"Open in Word Online","f":"Open in PowerPoint Online","a":"Open in Excel Online","d":"Open in OneNote Online","j":"Open in Visio Online"}')}.,205:e=>{e.exports=JSON.parse('{"c":"Still here?","a":"For your security, Personal Vault will automatically lock in 1 minute.","b":"Keep unlocked","f":"Personal Vault didn\\u0027t lock","d":"There was a problem locking your Personal Vault. If this happens again, you can sign out of OneDrive to lock your Personal Vault","e":"Retry"}')}.}]),define("initial.resx",[],{});

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41651)
Category:	downloaded
Size (bytes):	131537
Entropy (8bit):	5.2237799798561975
Encrypted:	false
SSDEEP:	3072:1f/HuF3CpxEIqQ0/9d1EwgXAnKxnKKviV:1f/HuZ1ILGV
MD5:	30B7C335C62E5269E2D35B8E8B9F44B4
SHA1:	C6D92B1516EB8F6D44AAF171FB24A1B2AADD0C4C
SHA-256:	10733A5D876108F81C5F78EEE5C9760A739D89C52FA6180C4290B7F909F24346
SHA-512:	5BCE247C84C88F993A857CE2F1E8540C648672DEB6D92A55BC808C33394B784C52866D635BEC8B7CD5E62A7EA4109569AC8BCD1381571B84592ACD6C5901D7A8
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/shell/_scrf/js/themes=default/54-af9f9f/c0-247156/de-099401/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/1b-c96630/db-bc0148/dc-7e9864/78-4c7d22/e1-c35781/40-7b7803/cd-23d3b0/6d-1e7ed0/b7-cadaa7/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/92-10345d/79-499886/7e-cda2d3/db-f3b1fd/93-283c2d/e0-3c9860/91-97a04f/1f-100dea/33-abe4df/19-c0fae7?ver=2.0&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65476)
Category:	downloaded
Size (bytes):	131576
Entropy (8bit):	5.3336550696173
Encrypted:	false
SSDEEP:	1536:WlHzBSZuu6aG6ePs15sqsDCNjiei7NmZuuJizS84Rb/KZAeLh:WlY676ePcegjiX7Nmxn9bKeeV
MD5:	3B09284824C13B8CDC6961C0E67F3882
SHA1:	D3E3DA90328D47BB43887CE0FA6176C936082B43
SHA-256:	6D3D61BC8A71041247CFB1C1CB8A7072CC3030B020B9F43845662EF1A05FA161
SHA-512:	DC7CF432825E9B99DDC25E432DB1DB6A13DCB98AB4C1F844ADF478307783D76E06173D64E960972FE7967DD8F013D913AB5F829C0CF38450D1F685195667EA97
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.010/wacodcowlhostwebpack.manifest/13.js
Preview:	/! For license information please see 13.js.LICENSE.txt /."use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[13],{223:(e,t,n)=>{n.r(t),n.d(t,{_InMemoryPropertyStorage:()=>ss,_OneDSLogger:()=>os,_SanitizerIds:()=>Fo.a,_getDefaultScrubberConfig:()=>ns.a});var a=n(0),i="function",r="object",o="undefined",s=Object,c=s.prototype,d=s.assign,l=s.create,u=s.defineProperty,f=c.hasOwnProperty,p=null;function m(e){void 0===e&&(e=!0);var t=!1===e?null:p;return t\|\|(typeof globalThis!==o&&(t=globalThis),t\|\|typeof self===o\|\|(t=self),t\|\|typeof window===o\|\|(t=window),t\|\|typeof n.g===o\|\|(t=n.g),p=t),t}function _(e){throw new TypeError(e)}function h(e){if(l)return l(e);if(null==e)return{};var t=typeof e;function n(){}return t!==r&&t!==i&&_("Object prototype may only be an Object:"+e),n.prototype=e,new n}(m()\|\|{}).Symbol,(m()\|\|{}).Reflect;var b,g=function(e,t){return g=s.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40671), with no line terminators
Category:	dropped
Size (bytes):	40671
Entropy (8bit):	5.568398329756874
Encrypted:	false
SSDEEP:	768:ThGmx33aPq7uFa9tzXm+QJXeBD3j/BvG0+s+UjUNPwCo3GVGpr8/ijJC:df3aYuFarzXmT6a02OdjJC
MD5:	04DFF97B1B74092AEBE7C57C65060257
SHA1:	7C12B096805BEC183A2C6A4DB24338601F85F201
SHA-256:	930F0EE3B959031A5AB3D01E7A242759F84FE654CB4306B1EF0965D514A800CA
SHA-512:	4DDE114E32A2542782254E147AD123771C685ABBF9C98D8F72D8C73D579575318F2CA6A48D069F65BBF24840FB44C7A5A9A1FDE08F2EE59A96A7D96A639F985C
Malicious:	false
Reputation:	low
Preview:	var $G={_rX:"113",_oq:"127",_oU:"50",_ou:"4",TrustedPCNameMaxLengthString:"63",_p8:"7",$aJ:"8",SAOTCMaxAcceptedLengthString:"10",UseDifferentOptionValue:"UseDifferent",_ry:"username",_or:"pcexp",XboxQS:"xbx",_m7:"mkt",_lU:"lc",SiteIdQS:"id"},$t={_ep:0,_lB:1,_rD:8,_c3:16},$z={_h0:function(a){if(_hX(a)&&a!=$z._i&&a!=$z._cC)return true;return false},_i:"",_cC:"0",_lD:10,InvalidIfExistsLogin:11,_ao:1e3,_bi:1001,_ks:1002,_cs:1005,_oT:1006,_p7:1007,_oo:1009,_oO:1010,_nj:1013,_oS:1015,FedUser:1016,FedUserConflict:1017,FedUserInviteBlocked:1018,_bC:1020,_ot:1021,AutoVerifyNoCodeSent:1022,_pM:1023,_pn:1024,_rM:1025,_qD:1026,PhoneNumberInvalid:1027,PhoneFormattingInvalid:1028,_6:9999,PP_E_DB_MEMBERDOESNOTEXIST:"CFFFFC15",PP_E_EXCLUDED:"80041010",PP_E_MEMBER_LOCKED:"80041011",_am:"80041012",_a3:"80041031",_br:"80041032",_aM:"800478AC",_bS:"8004490C",_o5:"80045801",_o8:"80045806",_o7:"80045807",_o6:"80045800",_o9:"80041100",_oy:"8004110D",_oY:"8004110B",_pa:"80041101",_an:"80041103",_pC:"80041120"

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	downloaded
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	563851
Entropy (8bit):	5.221453271093944
Encrypted:	false
SSDEEP:	6144:2VR57iqbPXlB5UR5vWenR5xWeMFdBjL+ks0EcU0MWEsuWe5fXbHfxlN/FNCn/Lpl:tTP0BKYtf
MD5:	12DD1E4D0485A80184B36D158018DE81
SHA1:	EB2594062E90E3DCD5127679F9C369D3BF39D61C
SHA-256:	A04B5B8B345E79987621008E6CC9BEF2B684663F9A820A0C7460E727A2A4DDC3
SHA-512:	F3A92BF0C681E6D2198970F43B966ABDF8CCBFF3F9BD5136A1CA911747369C49F8C36C69A7E98E0F2AED3163D9D1C5D44EFCE67A178DE479196845721219E12C
Malicious:	false
Reputation:	low
URL:	https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css
Preview:	@charset "UTF-8";/! @ms-mwf/mwf - v1.25.0+6321934 \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise.//! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	167730
Entropy (8bit):	5.045981547409661
Encrypted:	false
SSDEEP:	3072:OzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxW:clZAP+keedJ
MD5:	AFB5C64B13342F6E568093548D0A2A9F
SHA1:	95FC121CCCFDBA12443CF87A9C823486065A14AB
SHA-256:	238DB52476BF8107E2E851CD3299B071ED5944B570C1603A1EA758A4FADF5F29
SHA-512:	6FE8BADD1B94E81464C0808383A4CC77F779BF226A3C13B58B2BCB36332995EFBC7711373EE8AB2A8BC52675884F9885D168CB2DE9535E39E71B0B72940691E1
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/2b-7ae144/7e-3283eb/69-8122fc/86-016699/72-2b1d8c/80-6461e7/2a-d9be59/51-40faf7?ver=2.0
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 18:02:37.579359055 CET	49675	443	192.168.2.4	173.222.162.32
Oct 28, 2024 18:02:40.082331896 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.082374096 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.082453966 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.083245993 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.083287001 CET	443	49736	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.083352089 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.083636045 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.083668947 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.083856106 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.083872080 CET	443	49736	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.824131012 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.824486017 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.824512005 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.824918985 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.824999094 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.825586081 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.825654030 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.825812101 CET	443	49736	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.826111078 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.826126099 CET	443	49736	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.826729059 CET	443	49736	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.826841116 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.827747107 CET	443	49736	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.827812910 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.831621885 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.831708908 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.831743002 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.831830025 CET	443	49736	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.832032919 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.832051039 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.877629042 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.877629995 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:40.877652884 CET	443	49736	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:40.924988031 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:41.008862019 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:41.016868114 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:41.016933918 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:41.023057938 CET	49735	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:02:41.023072004 CET	443	49735	13.107.42.12	192.168.2.4
Oct 28, 2024 18:02:41.051796913 CET	49739	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:41.051873922 CET	443	49739	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:41.051996946 CET	49739	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:41.052689075 CET	49739	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:41.052723885 CET	443	49739	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:41.861334085 CET	443	49739	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:41.864118099 CET	49739	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:41.864166021 CET	443	49739	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:41.865741968 CET	443	49739	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:41.865811110 CET	49739	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:41.868573904 CET	49739	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:41.868666887 CET	443	49739	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:41.869057894 CET	49739	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:41.869076014 CET	443	49739	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:41.921721935 CET	49739	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:42.020867109 CET	443	49739	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:42.029200077 CET	443	49739	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:42.029767990 CET	49739	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:42.032566071 CET	49739	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:42.032599926 CET	443	49739	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:42.035573006 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:42.035656929 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:42.035769939 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:42.036010981 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:42.036043882 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:42.619992971 CET	49741	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:02:42.620076895 CET	443	49741	142.250.186.36	192.168.2.4
Oct 28, 2024 18:02:42.620166063 CET	49741	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:02:42.620790958 CET	49741	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:02:42.620830059 CET	443	49741	142.250.186.36	192.168.2.4
Oct 28, 2024 18:02:42.798062086 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:42.799079895 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:42.799139977 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:42.800307989 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:42.814553976 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:42.814779043 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:42.814889908 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:42.855357885 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.002190113 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.002257109 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.002331018 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.002362967 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.002420902 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.086533070 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.086568117 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.086622000 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.086679935 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.086699009 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.086725950 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.086777925 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.086791992 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.086843967 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.120758057 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.120836973 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.120851994 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.169190884 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.237296104 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.237323046 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.237379074 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.237423897 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.237442017 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.277434111 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.277545929 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.277606010 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.327927113 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.355483055 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.355504036 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.355566978 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.355580091 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.355640888 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.355642080 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.355667114 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.355855942 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.355916977 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.394438028 CET	49740	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:43.394481897 CET	443	49740	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:43.508912086 CET	443	49741	142.250.186.36	192.168.2.4
Oct 28, 2024 18:02:43.509291887 CET	49741	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:02:43.509350061 CET	443	49741	142.250.186.36	192.168.2.4
Oct 28, 2024 18:02:43.510799885 CET	443	49741	142.250.186.36	192.168.2.4
Oct 28, 2024 18:02:43.510873079 CET	49741	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:02:43.514554977 CET	49741	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:02:43.514650106 CET	443	49741	142.250.186.36	192.168.2.4
Oct 28, 2024 18:02:43.562741995 CET	49741	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:02:43.562760115 CET	443	49741	142.250.186.36	192.168.2.4
Oct 28, 2024 18:02:43.593390942 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:43.593451977 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:43.593533039 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:43.600749969 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:43.600806952 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:43.609086037 CET	49741	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:02:44.451913118 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:44.452018023 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:44.470664978 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:44.470696926 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:44.471120119 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:44.675338984 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:44.675442934 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:45.027657986 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:45.071372986 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:45.272672892 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:45.272850037 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:45.272908926 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:45.273102045 CET	49744	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:45.273123980 CET	443	49744	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:45.303658962 CET	49750	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:45.303728104 CET	443	49750	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:45.303819895 CET	49750	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:45.304272890 CET	49750	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:45.304307938 CET	443	49750	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:46.164550066 CET	443	49750	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:46.164647102 CET	49750	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:46.167036057 CET	49750	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:46.167064905 CET	443	49750	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:46.167433023 CET	443	49750	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:46.169461966 CET	49750	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:46.211378098 CET	443	49750	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:46.414350986 CET	443	49750	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:46.414422989 CET	443	49750	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:46.414483070 CET	49750	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:46.415283918 CET	49750	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:46.415345907 CET	443	49750	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:46.415381908 CET	49750	443	192.168.2.4	184.28.90.27
Oct 28, 2024 18:02:46.415412903 CET	443	49750	184.28.90.27	192.168.2.4
Oct 28, 2024 18:02:47.809456110 CET	49753	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:47.809489965 CET	443	49753	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:47.809770107 CET	49753	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:47.810113907 CET	49753	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:47.810132980 CET	443	49753	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:48.572923899 CET	443	49753	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:48.573354959 CET	49753	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:48.573391914 CET	443	49753	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:48.575093031 CET	443	49753	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:48.575171947 CET	49753	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:48.581187010 CET	49753	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:48.581294060 CET	443	49753	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:48.581532955 CET	49753	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:48.581568003 CET	443	49753	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:48.625268936 CET	49753	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:48.750077009 CET	443	49753	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:48.751025915 CET	49753	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:48.751070976 CET	443	49753	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:48.751147985 CET	49753	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:48.752023935 CET	49754	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:48.752068996 CET	443	49754	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:48.752319098 CET	49754	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:48.752664089 CET	49754	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:48.752684116 CET	443	49754	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:49.495006084 CET	443	49754	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:49.495208025 CET	49754	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:49.495237112 CET	443	49754	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:49.495727062 CET	443	49754	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:49.496364117 CET	49754	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:49.496445894 CET	443	49754	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:49.496547937 CET	49754	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:49.539339066 CET	443	49754	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:49.546437979 CET	49754	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:49.820497990 CET	443	49754	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:49.821337938 CET	443	49754	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:49.821424007 CET	49754	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:49.821679115 CET	49754	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:49.821696043 CET	443	49754	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:49.837318897 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:49.837357044 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:49.837424994 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:49.837774038 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:49.837795019 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:49.840567112 CET	49758	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:49.840595961 CET	443	49758	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:49.840670109 CET	49758	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:49.840861082 CET	49758	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:49.840873957 CET	443	49758	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:50.615855932 CET	443	49758	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:50.616194963 CET	49758	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:50.616205931 CET	443	49758	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:50.617716074 CET	443	49758	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:50.617779016 CET	49758	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:50.618163109 CET	49758	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:50.618248940 CET	443	49758	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:50.618479967 CET	49758	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:50.618488073 CET	443	49758	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:50.670886040 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.671220064 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.671253920 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.672043085 CET	49758	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:50.672925949 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.673005104 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.674130917 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.674226046 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.674319983 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.674335957 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.718872070 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.910135031 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.910183907 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.910267115 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.910321951 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.911197901 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.911287069 CET	443	49757	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.911495924 CET	49757	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.917299032 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.917327881 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.917402983 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.917898893 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:50.917922974 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:50.940133095 CET	443	49758	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:50.942317009 CET	443	49758	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:50.942414045 CET	49758	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:50.942615986 CET	49758	443	192.168.2.4	13.107.136.10
Oct 28, 2024 18:02:50.942631006 CET	443	49758	13.107.136.10	192.168.2.4
Oct 28, 2024 18:02:52.559880972 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.560214043 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.560229063 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.563818932 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.563895941 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.564352989 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.564529896 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.564542055 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.564677000 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.609462023 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.609471083 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.656326056 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.884535074 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.884567976 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.884632111 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.884650946 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.897746086 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.897912979 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.898015976 CET	49760	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.898029089 CET	443	49760	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.901632071 CET	49765	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.901714087 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:52.901873112 CET	49765	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.902349949 CET	49765	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:52.902384043 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:53.700058937 CET	443	49741	142.250.186.36	192.168.2.4
Oct 28, 2024 18:02:53.700258017 CET	443	49741	142.250.186.36	192.168.2.4
Oct 28, 2024 18:02:53.700443983 CET	49741	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:02:53.845438957 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:53.845720053 CET	49765	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:53.845756054 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:53.846120119 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:53.846641064 CET	49765	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:53.846641064 CET	49765	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:53.846683025 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:53.846743107 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:53.890788078 CET	49765	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:54.142050982 CET	49741	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:02:54.142095089 CET	443	49741	142.250.186.36	192.168.2.4
Oct 28, 2024 18:02:54.485949039 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:54.485979080 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:54.486052036 CET	49765	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:54.486112118 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:54.488677025 CET	49765	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:54.488739967 CET	443	49765	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:54.488806963 CET	49765	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:54.493191004 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:54.493225098 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:54.493316889 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:54.494024038 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:54.494035959 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.275609016 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.276000977 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.276017904 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.277456999 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.277528048 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.277878046 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.277954102 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.278033018 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.278045893 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.328685045 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.841387033 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.841459036 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.841547966 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.841563940 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.857275963 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.857353926 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.857549906 CET	49770	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.857563019 CET	443	49770	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.886802912 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.886831045 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.887031078 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.888385057 CET	49775	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.888423920 CET	443	49775	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.888562918 CET	49775	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.896451950 CET	49775	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.896475077 CET	443	49775	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:55.897216082 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:55.897232056 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.428339005 CET	49723	80	192.168.2.4	199.232.214.172
Oct 28, 2024 18:02:56.434514999 CET	80	49723	199.232.214.172	192.168.2.4
Oct 28, 2024 18:02:56.434598923 CET	49723	80	192.168.2.4	199.232.214.172
Oct 28, 2024 18:02:56.650309086 CET	443	49775	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.650614023 CET	49775	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:56.650650978 CET	443	49775	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.651149988 CET	443	49775	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.652574062 CET	49775	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:56.652669907 CET	443	49775	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.652889967 CET	49775	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:56.658973932 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.659348011 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:56.659358025 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.659845114 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.660933971 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:56.661007881 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.695372105 CET	443	49775	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.703171015 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:56.796772003 CET	443	49775	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.804024935 CET	443	49775	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:56.804090977 CET	49775	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:56.804254055 CET	49775	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:56.804286003 CET	443	49775	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:57.499242067 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:57.543330908 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:57.649209023 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:57.649225950 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:57.649300098 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:57.649312973 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:57.649960041 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:57.650065899 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:57.650073051 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:57.651623964 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:57.651659966 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:57.651827097 CET	443	49774	13.107.137.11	192.168.2.4
Oct 28, 2024 18:02:57.651907921 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:57.651907921 CET	49774	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:02:57.671521902 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:57.671547890 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:57.671705961 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:57.672115088 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:57.672132969 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.435030937 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.484765053 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:58.496428013 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:58.496443987 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.498111963 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.498181105 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:58.503772020 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:58.503854990 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.504098892 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:58.504106045 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.547236919 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:58.648691893 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.648720026 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.648787975 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:58.648797989 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.649574995 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.649584055 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.649651051 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:58.649657965 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.653739929 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:02:58.653780937 CET	443	49782	13.107.139.11	192.168.2.4
Oct 28, 2024 18:02:58.653958082 CET	49782	443	192.168.2.4	13.107.139.11
Oct 28, 2024 18:03:14.642462015 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:14.642565966 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:14.642716885 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:14.643917084 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:14.643954992 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:14.644443035 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:14.644543886 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 18:03:14.644619942 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:14.645106077 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:14.645142078 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 18:03:14.645474911 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:14.645498037 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:14.645721912 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:14.646862984 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:14.646889925 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.383539915 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 18:03:15.429476023 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:15.468878031 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:15.468903065 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 18:03:15.474087954 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 18:03:15.474181890 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:15.479650021 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:15.479775906 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 18:03:15.532448053 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:15.532475948 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 18:03:15.577853918 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:15.701059103 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.709851980 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.714138985 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:15.714199066 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.714406013 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:15.714421988 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.715848923 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.715939999 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:15.717737913 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.717811108 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:15.719805956 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:15.719907045 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.720287085 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:15.720491886 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.720884085 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:15.720902920 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.766539097 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:15.766539097 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:15.766561031 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:15.813414097 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:15.951967955 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.003808975 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.070935965 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.070961952 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.071006060 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.071022034 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.071058989 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.071059942 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.071079969 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.071084023 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.071111917 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.071111917 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.071129084 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.071181059 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.072592020 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.072627068 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.072668076 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.072674990 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.072715998 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.072736979 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.072772026 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.072791100 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.073725939 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.073797941 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.073812008 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.073896885 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.073945045 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.081115961 CET	49785	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.081146002 CET	443	49785	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.102045059 CET	49788	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.102089882 CET	443	49788	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.102287054 CET	49788	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.103455067 CET	49789	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.103526115 CET	443	49789	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.103650093 CET	49789	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.104513884 CET	49789	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.104543924 CET	443	49789	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.104899883 CET	49788	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.104949951 CET	443	49788	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.120836020 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.120858908 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.120974064 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.121442080 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:16.121450901 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:16.855400085 CET	443	49788	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.855761051 CET	49788	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.855801105 CET	443	49788	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.856300116 CET	443	49788	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.857166052 CET	49788	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.857259035 CET	443	49788	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.857383013 CET	49788	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.864773989 CET	443	49789	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.865051985 CET	49789	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.865075111 CET	443	49789	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.866559982 CET	443	49789	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.866633892 CET	49789	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.867104053 CET	49789	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.867189884 CET	443	49789	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.899353027 CET	443	49788	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.922080040 CET	49789	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:16.922110081 CET	443	49789	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:16.968352079 CET	49789	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:17.163933992 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.164382935 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.164393902 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.165875912 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.166024923 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.166390896 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.166456938 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.166680098 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.166687965 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.174439907 CET	443	49788	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:17.174511909 CET	443	49788	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:17.174659967 CET	49788	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:17.174693108 CET	443	49788	13.107.137.11	192.168.2.4
Oct 28, 2024 18:03:17.175734997 CET	49788	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:17.175796032 CET	49788	443	192.168.2.4	13.107.137.11
Oct 28, 2024 18:03:17.218743086 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.397787094 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.437242985 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.516393900 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.516407013 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.516479015 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.516480923 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.516522884 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.516551971 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.516563892 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.516577005 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.516577005 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.516593933 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.516614914 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.516614914 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.518517017 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.518539906 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.518589020 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.518595934 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.518629074 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.518645048 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.557518005 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.557593107 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.557605028 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.557647943 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:17.557688951 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.613991022 CET	49790	443	192.168.2.4	152.199.21.175
Oct 28, 2024 18:03:17.614015102 CET	443	49790	152.199.21.175	192.168.2.4
Oct 28, 2024 18:03:20.129410028 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 18:03:20.129513025 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 18:03:20.129560947 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:20.305468082 CET	49786	443	192.168.2.4	13.107.246.45
Oct 28, 2024 18:03:20.305505037 CET	443	49786	13.107.246.45	192.168.2.4
Oct 28, 2024 18:03:25.877818108 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:03:25.877835035 CET	443	49736	13.107.42.12	192.168.2.4
Oct 28, 2024 18:03:32.952423096 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:32.952472925 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:32.952538013 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:32.953547955 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:32.953562975 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:33.755911112 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:33.755995035 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:33.758307934 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:33.758323908 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:33.758637905 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:33.771441936 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:33.815336943 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.013098955 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.013117075 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.013132095 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.013201952 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.013233900 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.013282061 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.026139021 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.026156902 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.026227951 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.026249886 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.026307106 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.130688906 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.130707979 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.130784035 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.130811930 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.130851984 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.141894102 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.141913891 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.142020941 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.142050982 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.142096043 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.247885942 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.247906923 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.247987986 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.248016119 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.248053074 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.259015083 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.259035110 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.259123087 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.259150028 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.259188890 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.364953995 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.364990950 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.365065098 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.365098000 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.365125895 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.365144014 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.375627041 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.375657082 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.375747919 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.375777960 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.375817060 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.422940016 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.422971010 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.423037052 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.423070908 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.423106909 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.492115974 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.492170095 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.492219925 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.492254019 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.492275000 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.492292881 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.494028091 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.494072914 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.494106054 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.494122982 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.494158030 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.494174957 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.598599911 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.598632097 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.598725080 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.598757029 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.598860025 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.609740019 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.609798908 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.609847069 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.609874010 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.609889984 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.609910965 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.610707045 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.610771894 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.610788107 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.610826969 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.610831976 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.610876083 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.611047983 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.611064911 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.611078024 CET	49809	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.611083031 CET	443	49809	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.727498055 CET	49810	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.727531910 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.727790117 CET	49810	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.729346037 CET	49811	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.729403973 CET	443	49811	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.729474068 CET	49811	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.733582020 CET	49810	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.733594894 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.735508919 CET	49812	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.735549927 CET	443	49812	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.735624075 CET	49812	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.735812902 CET	49812	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.735829115 CET	443	49812	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.736198902 CET	49811	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.736216068 CET	443	49811	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.737109900 CET	49813	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.737162113 CET	443	49813	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.737217903 CET	49813	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.737371922 CET	49813	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.737385035 CET	443	49813	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.738459110 CET	49814	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.738470078 CET	443	49814	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:34.738522053 CET	49814	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.738954067 CET	49814	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:34.738964081 CET	443	49814	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.545335054 CET	443	49814	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.546802998 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.547765970 CET	443	49811	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.550061941 CET	49814	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.550086021 CET	443	49814	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.551256895 CET	49814	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.551261902 CET	443	49814	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.551616907 CET	49811	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.551629066 CET	443	49811	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.552349091 CET	49811	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.552355051 CET	443	49811	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.553499937 CET	49810	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.553520918 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.554038048 CET	49810	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.554043055 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.683859110 CET	443	49814	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.684333086 CET	443	49814	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.684401989 CET	49814	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.684469938 CET	49814	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.684490919 CET	443	49814	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.684501886 CET	49814	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.684508085 CET	443	49814	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.686362028 CET	443	49811	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.686388969 CET	443	49811	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.686451912 CET	443	49811	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.686469078 CET	49811	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.686503887 CET	49811	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.687433004 CET	49811	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.687450886 CET	443	49811	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.687462091 CET	49811	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.687467098 CET	443	49811	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.690299988 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.690329075 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.690397978 CET	49810	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.690409899 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.690448046 CET	49810	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.691268921 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.691327095 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.691435099 CET	49810	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.692414999 CET	49815	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.692447901 CET	443	49815	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.692595959 CET	49815	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.692646980 CET	49810	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.692661047 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.692692041 CET	49810	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.692698002 CET	443	49810	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.694379091 CET	49815	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.694399118 CET	443	49815	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.695883036 CET	49816	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.695925951 CET	443	49816	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.696016073 CET	49816	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.696156025 CET	49816	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.696171045 CET	443	49816	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.696858883 CET	49817	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.696927071 CET	443	49817	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.697114944 CET	49817	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.697273970 CET	49817	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.697305918 CET	443	49817	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.762160063 CET	443	49813	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.762300968 CET	443	49812	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.762936115 CET	49813	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.762943029 CET	443	49813	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.763767004 CET	49813	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.763771057 CET	443	49813	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.764193058 CET	49812	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.764276981 CET	443	49812	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.764867067 CET	49812	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.764883995 CET	443	49812	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.902398109 CET	443	49812	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.902429104 CET	443	49812	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.902519941 CET	49812	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.902545929 CET	443	49812	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.902594090 CET	49812	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.903012991 CET	443	49813	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.903109074 CET	49812	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.903155088 CET	443	49812	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.903203011 CET	49812	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.903219938 CET	443	49812	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.903245926 CET	443	49813	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.903299093 CET	49813	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.904992104 CET	49813	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.905006886 CET	443	49813	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.909588099 CET	49818	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.909636021 CET	443	49818	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.910264015 CET	49818	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.911401033 CET	49819	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.911444902 CET	443	49819	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.911501884 CET	49819	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.911597967 CET	49818	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.911611080 CET	443	49818	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:35.911725998 CET	49819	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:35.911740065 CET	443	49819	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.611358881 CET	443	49817	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.611867905 CET	49817	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.611898899 CET	443	49817	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.612576008 CET	49817	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.612581968 CET	443	49817	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.615441084 CET	443	49816	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.616302013 CET	49816	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.616332054 CET	443	49816	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.617161989 CET	49816	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.617170095 CET	443	49816	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.619553089 CET	443	49815	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.620153904 CET	49815	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.620172977 CET	443	49815	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.620945930 CET	49815	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.620953083 CET	443	49815	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.666276932 CET	443	49819	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.666853905 CET	49819	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.666882038 CET	443	49819	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.667351961 CET	49819	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.667357922 CET	443	49819	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.670536995 CET	443	49818	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.670923948 CET	49818	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.670952082 CET	443	49818	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.671319008 CET	49818	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.671325922 CET	443	49818	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.748076916 CET	443	49817	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.748441935 CET	443	49817	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.748507977 CET	49817	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.748536110 CET	49817	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.748553038 CET	443	49817	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.748564005 CET	49817	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.748569012 CET	443	49817	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.751878977 CET	49820	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.751924038 CET	443	49820	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.752181053 CET	49820	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.752393007 CET	49820	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.752403975 CET	443	49820	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.754091978 CET	443	49816	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.754853010 CET	443	49816	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.754920006 CET	49816	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.754971981 CET	49816	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.754993916 CET	443	49816	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.755006075 CET	49816	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.755012989 CET	443	49816	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.757283926 CET	49821	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.757318974 CET	443	49821	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.757452011 CET	49821	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.757611990 CET	49821	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.757627010 CET	443	49821	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.763350010 CET	443	49815	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.763617039 CET	443	49815	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.763669014 CET	49815	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.763710022 CET	49815	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.763726950 CET	443	49815	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.763740063 CET	49815	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.763745070 CET	443	49815	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.767664909 CET	49822	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.767682076 CET	443	49822	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.767936945 CET	49822	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.767936945 CET	49822	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.767959118 CET	443	49822	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.804653883 CET	443	49819	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.804716110 CET	443	49819	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.804778099 CET	49819	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.804977894 CET	49819	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.804991961 CET	443	49819	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.805013895 CET	49819	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.805018902 CET	443	49819	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.807683945 CET	49823	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.807718039 CET	443	49823	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.807781935 CET	49823	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.807961941 CET	49823	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.807972908 CET	443	49823	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.808079958 CET	443	49818	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.808228016 CET	443	49818	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.808285952 CET	49818	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.808327913 CET	49818	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.808327913 CET	49818	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.808346033 CET	443	49818	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.808356047 CET	443	49818	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.810322046 CET	49824	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.810369015 CET	443	49824	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:36.810441017 CET	49824	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.810590982 CET	49824	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:36.810611010 CET	443	49824	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.503694057 CET	443	49820	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.504309893 CET	49820	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.504333019 CET	443	49820	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.504831076 CET	49820	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.504834890 CET	443	49820	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.517451048 CET	443	49822	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.517811060 CET	49822	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.517818928 CET	443	49822	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.518213987 CET	49822	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.518218040 CET	443	49822	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.520879984 CET	443	49821	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.521188021 CET	49821	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.521204948 CET	443	49821	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.521548986 CET	49821	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.521554947 CET	443	49821	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.572204113 CET	443	49824	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.572688103 CET	49824	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.572705984 CET	443	49824	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.573227882 CET	49824	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.573234081 CET	443	49824	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.591433048 CET	443	49823	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.591846943 CET	49823	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.591861010 CET	443	49823	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.592294931 CET	49823	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.592298985 CET	443	49823	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.639801979 CET	443	49820	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.639874935 CET	443	49820	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.639940023 CET	49820	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.641088009 CET	49820	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.641110897 CET	443	49820	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.641118050 CET	49820	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.641123056 CET	443	49820	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.650423050 CET	49825	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.650476933 CET	443	49825	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.650660038 CET	49825	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.650824070 CET	49825	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.650840998 CET	443	49825	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.651082039 CET	443	49822	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.651469946 CET	443	49822	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.651521921 CET	49822	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.651561975 CET	49822	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.651570082 CET	443	49822	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.651599884 CET	49822	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.651603937 CET	443	49822	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.653692961 CET	49826	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.653724909 CET	443	49826	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.653774977 CET	49826	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.653898001 CET	49826	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.653907061 CET	443	49826	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.659673929 CET	443	49821	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.660064936 CET	443	49821	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.660120964 CET	49821	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.660171032 CET	49821	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.660186052 CET	443	49821	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.660191059 CET	49821	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.660196066 CET	443	49821	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.661973000 CET	49827	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.661999941 CET	443	49827	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.662148952 CET	49827	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.662201881 CET	49827	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.662211895 CET	443	49827	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.711286068 CET	443	49824	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.711370945 CET	443	49824	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.711437941 CET	49824	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.711702108 CET	49824	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.711723089 CET	443	49824	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.711733103 CET	49824	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.711738110 CET	443	49824	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.714593887 CET	49828	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.714654922 CET	443	49828	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.714742899 CET	49828	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.714922905 CET	49828	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.714946032 CET	443	49828	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.729260921 CET	443	49823	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.729432106 CET	443	49823	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.729485035 CET	49823	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.729567051 CET	49823	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.729582071 CET	443	49823	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.729592085 CET	49823	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.729598045 CET	443	49823	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.732284069 CET	49829	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.732321024 CET	443	49829	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:37.732479095 CET	49829	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.732623100 CET	49829	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:37.732633114 CET	443	49829	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.408533096 CET	443	49825	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.409259081 CET	49825	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.409276009 CET	443	49825	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.409818888 CET	49825	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.409826994 CET	443	49825	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.415730000 CET	443	49826	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.416091919 CET	49826	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.416120052 CET	443	49826	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.416481972 CET	49826	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.416486979 CET	443	49826	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.427069902 CET	443	49827	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.427463055 CET	49827	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.427476883 CET	443	49827	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.427782059 CET	49827	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.427788973 CET	443	49827	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.458762884 CET	443	49828	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.459302902 CET	49828	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.459328890 CET	443	49828	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.459839106 CET	49828	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.459844112 CET	443	49828	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.496028900 CET	443	49829	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.496630907 CET	49829	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.496649027 CET	443	49829	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.496958971 CET	49829	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.496965885 CET	443	49829	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.746490002 CET	443	49825	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.746561050 CET	443	49825	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.746608973 CET	49825	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.746730089 CET	443	49826	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.746844053 CET	443	49826	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.746892929 CET	49825	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.746913910 CET	443	49825	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.746918917 CET	49826	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.747066975 CET	49826	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.747088909 CET	49825	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.747090101 CET	443	49826	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.747096062 CET	443	49827	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.747097969 CET	443	49825	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.747108936 CET	49826	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.747117043 CET	443	49826	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.747148991 CET	443	49828	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.747172117 CET	443	49827	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.747236967 CET	443	49828	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.747330904 CET	49827	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.747908115 CET	49828	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.747908115 CET	49828	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.747908115 CET	49828	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.748735905 CET	49827	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.748735905 CET	49827	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.748747110 CET	443	49827	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.748754978 CET	443	49827	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.751724958 CET	49832	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.751753092 CET	49831	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.751775026 CET	443	49832	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.751786947 CET	443	49831	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.751847982 CET	49832	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.751873970 CET	49831	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.752892017 CET	49833	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.752976894 CET	443	49833	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.753057003 CET	49833	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.753207922 CET	49832	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.753223896 CET	443	49832	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.753298998 CET	49831	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.753310919 CET	443	49831	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.753520012 CET	49834	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.753532887 CET	443	49834	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.753690958 CET	49833	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.753705978 CET	49834	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.753727913 CET	443	49833	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.753798962 CET	49834	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.753810883 CET	443	49834	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.872364044 CET	443	49829	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.872442961 CET	443	49829	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.872514963 CET	49829	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.872788906 CET	49829	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.872809887 CET	443	49829	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.872816086 CET	49829	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.872822046 CET	443	49829	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.876405001 CET	49835	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.876449108 CET	443	49835	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:38.876507998 CET	49835	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.876718044 CET	49835	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:38.876734972 CET	443	49835	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.035342932 CET	49828	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.035383940 CET	443	49828	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.511348009 CET	443	49832	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.511940002 CET	49832	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.511972904 CET	443	49832	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.512507915 CET	49832	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.512518883 CET	443	49832	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.516808987 CET	443	49833	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.517199993 CET	49833	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.517227888 CET	443	49833	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.517606020 CET	49833	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.517618895 CET	443	49833	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.520198107 CET	443	49831	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.520576954 CET	49831	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.520596981 CET	443	49831	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.520787001 CET	443	49834	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.520977974 CET	49831	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.520984888 CET	443	49831	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.521133900 CET	49834	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.521156073 CET	443	49834	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.521590948 CET	49834	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.521596909 CET	443	49834	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.649879932 CET	443	49832	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.650255919 CET	443	49832	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.650330067 CET	49832	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.650417089 CET	49832	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.650439978 CET	443	49832	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.650455952 CET	49832	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.650464058 CET	443	49832	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.653358936 CET	49836	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.653399944 CET	443	49836	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.653464079 CET	49836	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.653619051 CET	49836	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.653633118 CET	443	49836	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.654963970 CET	443	49833	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.655033112 CET	443	49833	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.655155897 CET	49833	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.655224085 CET	49833	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.655224085 CET	49833	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.655267954 CET	443	49833	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.655296087 CET	443	49833	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.655457973 CET	443	49831	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.655555964 CET	443	49831	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.655658007 CET	49831	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.655878067 CET	49831	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.655878067 CET	49831	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.655899048 CET	443	49831	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.655909061 CET	443	49831	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.657891989 CET	49837	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.657928944 CET	443	49837	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.658231020 CET	49838	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.658241034 CET	443	49838	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.658267021 CET	49837	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.658298969 CET	49838	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.658417940 CET	49837	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.658432961 CET	443	49837	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.658442974 CET	49838	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.658452034 CET	443	49838	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.659892082 CET	443	49834	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.660031080 CET	443	49834	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.660090923 CET	49834	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.660116911 CET	49834	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.660125971 CET	443	49834	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.660140038 CET	49834	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.660145044 CET	443	49834	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.662050962 CET	49839	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.662070036 CET	443	49839	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.662250042 CET	49839	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.662389040 CET	49839	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.662405968 CET	443	49839	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.863722086 CET	443	49835	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.864304066 CET	49835	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.864346981 CET	443	49835	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:39.864931107 CET	49835	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:39.864938974 CET	443	49835	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.004772902 CET	443	49835	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.004842043 CET	443	49835	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.004897118 CET	49835	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.005253077 CET	49835	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.005278111 CET	443	49835	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.005291939 CET	49835	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.005300045 CET	443	49835	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.008723974 CET	49840	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.008754015 CET	443	49840	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.008987904 CET	49840	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.009186029 CET	49840	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.009202003 CET	443	49840	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.400893927 CET	443	49838	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.401459932 CET	49838	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.401489973 CET	443	49838	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.402004957 CET	49838	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.402015924 CET	443	49838	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.409113884 CET	443	49836	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.409590960 CET	49836	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.409604073 CET	443	49836	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.410006046 CET	49836	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.410011053 CET	443	49836	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.413336992 CET	443	49839	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.413669109 CET	49839	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.413690090 CET	443	49839	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.414021969 CET	49839	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.414028883 CET	443	49839	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.423996925 CET	443	49837	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.424330950 CET	49837	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.424344063 CET	443	49837	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.424711943 CET	49837	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.424716949 CET	443	49837	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.537389994 CET	443	49838	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.538548946 CET	443	49838	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.538609982 CET	49838	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.538721085 CET	49838	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.538738012 CET	443	49838	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.538750887 CET	49838	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.538757086 CET	443	49838	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.541814089 CET	49841	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.541852951 CET	443	49841	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.541991949 CET	49841	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.542196035 CET	49841	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.542210102 CET	443	49841	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.561266899 CET	443	49837	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.561352015 CET	443	49837	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.561415911 CET	49837	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.561638117 CET	49837	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.561659098 CET	443	49837	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.561669111 CET	49837	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.561675072 CET	443	49837	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.564970970 CET	49842	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.565015078 CET	443	49842	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.565176010 CET	49842	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.565387964 CET	49842	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.565403938 CET	443	49842	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.572928905 CET	443	49839	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.572993994 CET	443	49839	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.573040962 CET	49839	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.573216915 CET	49839	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.573229074 CET	443	49839	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.573246956 CET	443	49836	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.573250055 CET	49839	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.573256016 CET	443	49839	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.573410988 CET	443	49836	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.573471069 CET	49836	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.573486090 CET	49836	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.573492050 CET	443	49836	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.573498011 CET	49836	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.573502064 CET	443	49836	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.576603889 CET	49844	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.576622009 CET	49843	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.576632977 CET	443	49844	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.576641083 CET	443	49843	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.576700926 CET	49844	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.576714993 CET	49843	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.576900005 CET	49843	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.576910973 CET	443	49843	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.576946974 CET	49844	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.576963902 CET	443	49844	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.754332066 CET	443	49840	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.758579016 CET	49840	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.758604050 CET	443	49840	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:40.759377003 CET	49840	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:40.759386063 CET	443	49840	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.105803967 CET	443	49840	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.105907917 CET	443	49840	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.105993032 CET	49840	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.106204033 CET	49840	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.106229067 CET	443	49840	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.106259108 CET	49840	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.106266022 CET	443	49840	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.109384060 CET	49845	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.109431982 CET	443	49845	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.109570980 CET	49845	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.109808922 CET	49845	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.109819889 CET	443	49845	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.547859907 CET	443	49843	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.548479080 CET	49843	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.548518896 CET	443	49843	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.548969030 CET	49843	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.548976898 CET	443	49843	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.552876949 CET	443	49841	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.553308964 CET	49841	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.553333998 CET	443	49841	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.553709984 CET	49841	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.553716898 CET	443	49841	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.553811073 CET	443	49844	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.554725885 CET	49844	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.554760933 CET	443	49844	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.554994106 CET	49844	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.555001020 CET	443	49844	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.556116104 CET	443	49842	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.556476116 CET	49842	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.556495905 CET	443	49842	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.556797028 CET	49842	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.556803942 CET	443	49842	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.683109999 CET	443	49843	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.684815884 CET	443	49843	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.684926987 CET	49843	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.684984922 CET	49843	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.685005903 CET	443	49843	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.685024023 CET	49843	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.685031891 CET	443	49843	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.688307047 CET	49846	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.688358068 CET	443	49846	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.688429117 CET	49846	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.688595057 CET	49846	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.688608885 CET	443	49846	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.691268921 CET	443	49844	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.691356897 CET	443	49844	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.691492081 CET	49844	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.691513062 CET	443	49841	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.691517115 CET	49844	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.691526890 CET	443	49844	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.691572905 CET	443	49841	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.691636086 CET	49841	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.691725016 CET	49841	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.691735983 CET	443	49841	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.691745043 CET	49841	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.691751003 CET	443	49841	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.694116116 CET	49847	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.694152117 CET	443	49847	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.694247961 CET	49847	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.694426060 CET	49848	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.694431067 CET	49847	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.694447994 CET	443	49847	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.694467068 CET	443	49848	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.694467068 CET	443	49842	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.694533110 CET	49848	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.694536924 CET	443	49842	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.694606066 CET	49842	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.694657087 CET	49842	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.694657087 CET	49842	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.694674969 CET	443	49842	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.694679976 CET	443	49842	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.694839001 CET	49848	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.694856882 CET	443	49848	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.696619987 CET	49849	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.696641922 CET	443	49849	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:41.696888924 CET	49849	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.697000980 CET	49849	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:41.697014093 CET	443	49849	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.169629097 CET	443	49845	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.170259953 CET	49845	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.170346975 CET	443	49845	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.171016932 CET	49845	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.171034098 CET	443	49845	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.306619883 CET	443	49845	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.306710005 CET	443	49845	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.306785107 CET	49845	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.306962967 CET	49845	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.307012081 CET	443	49845	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.307039022 CET	49845	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.307054043 CET	443	49845	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.310132980 CET	49850	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.310169935 CET	443	49850	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.310224056 CET	49850	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.310415030 CET	49850	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.310429096 CET	443	49850	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.435548067 CET	443	49846	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.436070919 CET	49846	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.436105013 CET	443	49846	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.436549902 CET	49846	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.436556101 CET	443	49846	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.458298922 CET	443	49848	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.459089994 CET	49848	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.459131956 CET	443	49848	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.459141970 CET	443	49849	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.459830046 CET	49848	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.459836960 CET	443	49848	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.460988045 CET	49849	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.461004972 CET	443	49849	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.461220980 CET	443	49847	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.465615988 CET	49849	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.465621948 CET	443	49849	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.465671062 CET	49847	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.465725899 CET	443	49847	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.466167927 CET	49847	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.466182947 CET	443	49847	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.572093010 CET	443	49846	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.572179079 CET	443	49846	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.572352886 CET	49846	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.572448969 CET	49846	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.572448969 CET	49846	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.572472095 CET	443	49846	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.572482109 CET	443	49846	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.575531960 CET	49851	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.575572968 CET	443	49851	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.575634956 CET	49851	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.575779915 CET	49851	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.575790882 CET	443	49851	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.600357056 CET	443	49849	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.600541115 CET	443	49849	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.600651026 CET	49849	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.600667000 CET	443	49847	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.600680113 CET	49849	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.600696087 CET	443	49849	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.600708961 CET	49849	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.600714922 CET	443	49849	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.600831032 CET	443	49847	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.601270914 CET	49847	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.601321936 CET	49847	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.601346970 CET	443	49847	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.601361036 CET	49847	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.601368904 CET	443	49847	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.602555037 CET	443	49848	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.602618933 CET	443	49848	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.602708101 CET	49848	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.602967978 CET	49848	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.602981091 CET	443	49848	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.602993965 CET	49848	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.602998972 CET	443	49848	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.603952885 CET	49852	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.603997946 CET	443	49852	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.604183912 CET	49853	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.604223967 CET	443	49853	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.604228020 CET	49852	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.604273081 CET	49853	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.604496956 CET	49853	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.604510069 CET	443	49853	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.604619980 CET	49852	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.604691029 CET	443	49852	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.605938911 CET	49854	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.605967045 CET	443	49854	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.606024981 CET	49854	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.606152058 CET	49854	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:42.606162071 CET	443	49854	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:42.657979012 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:03:42.658111095 CET	443	49736	13.107.42.12	192.168.2.4
Oct 28, 2024 18:03:42.658175945 CET	49736	443	192.168.2.4	13.107.42.12
Oct 28, 2024 18:03:42.658390045 CET	49855	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:03:42.658478022 CET	443	49855	142.250.186.36	192.168.2.4
Oct 28, 2024 18:03:42.658545017 CET	49855	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:03:42.658804893 CET	49855	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:03:42.658822060 CET	443	49855	142.250.186.36	192.168.2.4
Oct 28, 2024 18:03:43.284754992 CET	443	49850	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.285799980 CET	49850	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.285800934 CET	49850	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.285824060 CET	443	49850	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.285842896 CET	443	49850	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.418621063 CET	443	49854	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.419734955 CET	49854	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.419734955 CET	49854	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.419755936 CET	443	49854	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.419770002 CET	443	49854	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.421262026 CET	443	49850	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.421325922 CET	443	49850	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.421559095 CET	49850	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.421586990 CET	49850	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.421587944 CET	49850	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.421606064 CET	443	49850	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.421622992 CET	443	49850	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.424062014 CET	443	49851	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.424551964 CET	49851	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.424571991 CET	443	49851	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.425086975 CET	49851	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.425091982 CET	443	49851	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.425551891 CET	49856	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.425589085 CET	443	49856	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.425699949 CET	49856	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.425796032 CET	443	49852	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.425829887 CET	49856	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.425843954 CET	443	49856	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.426480055 CET	49852	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.426480055 CET	49852	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.426491022 CET	443	49852	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.426506996 CET	443	49852	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.429828882 CET	443	49853	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.430519104 CET	49853	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.430519104 CET	49853	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.430533886 CET	443	49853	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.430541992 CET	443	49853	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.530781984 CET	443	49855	142.250.186.36	192.168.2.4
Oct 28, 2024 18:03:43.531280994 CET	49855	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:03:43.531320095 CET	443	49855	142.250.186.36	192.168.2.4
Oct 28, 2024 18:03:43.531653881 CET	443	49855	142.250.186.36	192.168.2.4
Oct 28, 2024 18:03:43.532104015 CET	49855	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:03:43.532176018 CET	443	49855	142.250.186.36	192.168.2.4
Oct 28, 2024 18:03:43.553688049 CET	443	49854	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.553934097 CET	443	49854	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.554034948 CET	49854	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.554034948 CET	49854	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.554143906 CET	49854	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.554163933 CET	443	49854	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.557106018 CET	49857	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.557131052 CET	443	49857	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.557307959 CET	49857	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.557455063 CET	49857	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.557470083 CET	443	49857	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.561785936 CET	443	49852	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.562382936 CET	443	49852	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.562630892 CET	49852	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.562630892 CET	49852	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.562798977 CET	49852	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.562803984 CET	443	49852	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.563862085 CET	443	49851	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.563914061 CET	443	49851	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.563997984 CET	49851	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.564088106 CET	49851	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.564101934 CET	443	49851	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.564138889 CET	49851	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.564143896 CET	443	49851	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.565361977 CET	49858	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.565395117 CET	443	49858	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.565498114 CET	49858	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.566041946 CET	49858	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.566055059 CET	443	49858	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.566065073 CET	49859	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.566083908 CET	443	49859	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.566145897 CET	49859	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.566271067 CET	49859	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.566282988 CET	443	49859	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.568175077 CET	443	49853	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.568834066 CET	443	49853	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.568912983 CET	49853	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.568936110 CET	49853	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.568936110 CET	49853	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.568943977 CET	443	49853	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.568952084 CET	443	49853	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.570734024 CET	49860	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.570754051 CET	443	49860	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.570869923 CET	49860	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.570971966 CET	49860	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:43.570982933 CET	443	49860	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:43.577589989 CET	49855	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:03:43.871922970 CET	49724	80	192.168.2.4	199.232.214.172
Oct 28, 2024 18:03:43.878669977 CET	80	49724	199.232.214.172	192.168.2.4
Oct 28, 2024 18:03:43.878926992 CET	49724	80	192.168.2.4	199.232.214.172
Oct 28, 2024 18:03:44.179768085 CET	443	49856	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.180541039 CET	49856	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.180567980 CET	443	49856	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.181315899 CET	49856	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.181320906 CET	443	49856	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.314958096 CET	443	49857	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.317625999 CET	443	49856	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.318039894 CET	443	49856	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.318267107 CET	443	49859	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.318342924 CET	49856	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.340266943 CET	49857	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.340297937 CET	443	49857	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.341377020 CET	49856	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.341409922 CET	443	49856	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.341423988 CET	49856	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.341430902 CET	443	49856	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.341449022 CET	49857	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.341455936 CET	443	49857	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.343075037 CET	49859	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.343096018 CET	443	49859	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.343959093 CET	49859	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.343964100 CET	443	49859	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.346282959 CET	443	49860	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.346645117 CET	49860	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.346666098 CET	443	49860	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.347016096 CET	49860	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.347022057 CET	443	49860	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.347431898 CET	49861	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.347477913 CET	443	49861	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.347558022 CET	49861	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.347703934 CET	49861	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.347718954 CET	443	49861	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.361562014 CET	443	49858	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.365545034 CET	49858	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.365565062 CET	443	49858	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.368911982 CET	49858	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.368916988 CET	443	49858	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.474117041 CET	443	49857	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.474176884 CET	443	49857	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.474292040 CET	49857	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.474545956 CET	49857	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.474545956 CET	49857	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.474567890 CET	443	49857	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.474575996 CET	443	49857	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.477447987 CET	443	49859	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.477504969 CET	443	49859	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.477613926 CET	49859	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.487437963 CET	443	49860	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.487896919 CET	443	49860	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.487974882 CET	49860	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.501806974 CET	49859	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.501828909 CET	443	49859	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.501842976 CET	49859	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.501849890 CET	443	49859	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.508430958 CET	443	49858	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.508583069 CET	443	49858	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.508665085 CET	49858	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.511049986 CET	49858	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.511049986 CET	49858	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.511070967 CET	443	49858	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.511080980 CET	443	49858	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.533268929 CET	49860	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.533293962 CET	443	49860	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.533304930 CET	49860	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.533312082 CET	443	49860	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.536259890 CET	49862	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.536283970 CET	443	49862	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.536391973 CET	49862	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.536865950 CET	49862	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.536879063 CET	443	49862	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.538381100 CET	49863	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.538428068 CET	443	49863	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.538570881 CET	49863	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.538724899 CET	49863	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.538743019 CET	443	49863	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.540323019 CET	49864	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.540429115 CET	443	49864	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.540514946 CET	49864	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.543062925 CET	49864	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.543097019 CET	443	49864	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.543823957 CET	49865	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.543860912 CET	443	49865	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:44.544059992 CET	49865	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.544385910 CET	49865	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:44.544404030 CET	443	49865	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.138560057 CET	443	49861	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.139085054 CET	49861	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.139117002 CET	443	49861	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.139632940 CET	49861	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.139638901 CET	443	49861	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.279583931 CET	443	49861	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.279649973 CET	443	49861	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.279762983 CET	49861	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.279987097 CET	49861	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.279988050 CET	49861	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.280009985 CET	443	49861	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.280020952 CET	443	49861	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.283904076 CET	49866	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.283961058 CET	443	49866	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.284023046 CET	49866	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.284188032 CET	49866	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.284200907 CET	443	49866	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.286669016 CET	443	49863	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.287251949 CET	49863	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.287276030 CET	443	49863	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.287738085 CET	49863	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.287748098 CET	443	49863	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.297177076 CET	443	49865	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.297554970 CET	49865	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.297579050 CET	443	49865	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.297981024 CET	49865	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.297986984 CET	443	49865	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.319103003 CET	443	49864	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.319611073 CET	49864	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.319637060 CET	443	49864	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.320085049 CET	49864	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.320095062 CET	443	49864	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.335185051 CET	443	49862	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.335812092 CET	49862	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.335836887 CET	443	49862	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.336468935 CET	49862	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.336473942 CET	443	49862	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.424920082 CET	443	49863	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.425103903 CET	443	49863	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.425255060 CET	49863	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.425295115 CET	49863	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.425295115 CET	49863	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.425313950 CET	443	49863	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.425328970 CET	443	49863	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.428426981 CET	49867	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.428467989 CET	443	49867	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.428530931 CET	49867	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.428715944 CET	49867	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.428729057 CET	443	49867	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.436564922 CET	443	49865	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.436626911 CET	443	49865	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.436685085 CET	49865	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.436862946 CET	49865	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.436868906 CET	443	49865	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.436897039 CET	49865	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.436902046 CET	443	49865	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.439466953 CET	49868	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.439557076 CET	443	49868	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.439768076 CET	49868	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.439912081 CET	49868	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.439945936 CET	443	49868	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.461950064 CET	443	49864	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.462006092 CET	443	49864	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.462074995 CET	49864	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.462232113 CET	49864	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.462285995 CET	443	49864	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.462316990 CET	49864	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.462333918 CET	443	49864	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.464478016 CET	49869	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.464513063 CET	443	49869	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.464571953 CET	49869	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.464700937 CET	49869	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.464709044 CET	443	49869	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.479062080 CET	443	49862	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.479214907 CET	443	49862	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.479269981 CET	49862	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.479334116 CET	49862	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.479335070 CET	49862	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.479347944 CET	443	49862	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.479358912 CET	443	49862	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.481308937 CET	49870	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.481374979 CET	443	49870	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:45.481455088 CET	49870	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.481583118 CET	49870	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:45.481617928 CET	443	49870	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.040210009 CET	443	49866	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.041821003 CET	49866	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.041841984 CET	443	49866	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.043267965 CET	49866	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.043275118 CET	443	49866	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.178301096 CET	443	49866	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.178864002 CET	443	49866	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.178935051 CET	49866	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.179188013 CET	49866	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.179188013 CET	49866	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.179222107 CET	443	49866	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.179239035 CET	443	49866	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.184360027 CET	49871	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.184423923 CET	443	49871	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.184488058 CET	49871	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.184886932 CET	49871	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.184906960 CET	443	49871	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.199065924 CET	443	49867	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.199703932 CET	49867	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.199738026 CET	443	49867	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.200459957 CET	49867	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.200464964 CET	443	49867	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.202580929 CET	443	49869	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.203265905 CET	49869	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.203285933 CET	443	49869	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.205049038 CET	443	49868	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.228233099 CET	49869	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.228254080 CET	443	49869	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.229531050 CET	49868	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.229554892 CET	443	49868	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.230391026 CET	49868	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.230396986 CET	443	49868	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.273005962 CET	443	49870	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.273837090 CET	49870	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.273864031 CET	443	49870	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.274705887 CET	49870	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.274717093 CET	443	49870	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.341747999 CET	443	49867	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.341913939 CET	443	49867	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.341981888 CET	49867	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.342276096 CET	49867	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.342295885 CET	443	49867	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.347240925 CET	49872	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.347268105 CET	443	49872	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.347413063 CET	49872	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.347749949 CET	49872	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.347767115 CET	443	49872	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.359239101 CET	443	49869	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.359529018 CET	443	49869	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.359595060 CET	49869	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.359699965 CET	49869	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.359720945 CET	443	49869	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.359731913 CET	49869	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.359738111 CET	443	49869	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.364614010 CET	443	49868	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.365472078 CET	443	49868	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.365530968 CET	49868	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.365886927 CET	49873	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.365962982 CET	443	49873	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.366036892 CET	49873	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.366127014 CET	49868	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.366147041 CET	443	49868	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.366164923 CET	49868	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.366169930 CET	443	49868	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.366725922 CET	49873	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.366763115 CET	443	49873	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.370898962 CET	49874	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.370917082 CET	443	49874	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.370994091 CET	49874	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.371371031 CET	49874	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.371383905 CET	443	49874	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.411001921 CET	443	49870	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.411071062 CET	443	49870	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.411125898 CET	49870	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.412866116 CET	49870	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.412866116 CET	49870	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.412897110 CET	443	49870	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.412915945 CET	443	49870	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.508769989 CET	49875	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.508843899 CET	443	49875	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.508919001 CET	49875	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.510452032 CET	49875	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.510477066 CET	443	49875	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.971208096 CET	443	49871	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.971751928 CET	49871	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.971786022 CET	443	49871	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:46.972227097 CET	49871	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:46.972233057 CET	443	49871	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.102629900 CET	443	49872	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.103184938 CET	49872	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.103214025 CET	443	49872	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.103671074 CET	49872	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.103676081 CET	443	49872	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.129070044 CET	443	49871	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.129137039 CET	443	49871	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.129200935 CET	49871	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.129364014 CET	49871	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.129385948 CET	443	49871	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.129401922 CET	49871	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.129407883 CET	443	49871	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.132566929 CET	49876	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.132586956 CET	443	49876	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.132647038 CET	49876	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.132775068 CET	49876	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.132780075 CET	443	49876	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.135478020 CET	443	49873	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.135818958 CET	443	49874	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.135837078 CET	49873	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.135912895 CET	443	49873	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.136281013 CET	49873	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.136295080 CET	443	49873	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.136409044 CET	49874	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.136420965 CET	443	49874	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.136847019 CET	49874	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.136852026 CET	443	49874	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.240909100 CET	443	49872	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.241060019 CET	443	49872	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.241133928 CET	49872	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.255820036 CET	49872	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.255845070 CET	443	49872	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.259815931 CET	49877	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.259907961 CET	443	49877	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.259993076 CET	49877	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.260212898 CET	49877	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.260245085 CET	443	49877	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.272157907 CET	443	49874	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.272427082 CET	443	49874	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.272528887 CET	49874	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.272543907 CET	49874	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.272550106 CET	443	49874	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.272558928 CET	49874	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.272564888 CET	443	49874	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.272875071 CET	443	49873	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.273371935 CET	443	49873	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.273443937 CET	49873	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.273884058 CET	49873	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.273916006 CET	443	49873	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.273978949 CET	49873	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.273994923 CET	443	49873	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.275623083 CET	49878	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.275648117 CET	443	49878	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.275774956 CET	49878	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.275896072 CET	49878	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.275907040 CET	443	49878	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.279481888 CET	49879	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.279493093 CET	443	49879	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.279604912 CET	49879	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.279911041 CET	49879	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.279922009 CET	443	49879	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.283397913 CET	443	49875	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.284179926 CET	49875	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.284214973 CET	443	49875	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.285386086 CET	49875	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.285398960 CET	443	49875	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.423654079 CET	443	49875	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.423782110 CET	443	49875	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.423863888 CET	49875	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.424237967 CET	49875	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.424261093 CET	443	49875	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.431430101 CET	49880	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.431468964 CET	443	49880	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.431546926 CET	49880	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.431767941 CET	49880	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.431783915 CET	443	49880	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.887989998 CET	443	49876	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.888609886 CET	49876	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.888644934 CET	443	49876	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:47.889641047 CET	49876	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:47.889647007 CET	443	49876	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.013101101 CET	443	49877	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.013782978 CET	49877	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.013834000 CET	443	49877	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.014564991 CET	49877	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.014581919 CET	443	49877	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.039201975 CET	443	49876	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.039283037 CET	443	49876	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.039355993 CET	49876	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.041296959 CET	49876	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.041316032 CET	443	49876	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.041366100 CET	49876	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.041373968 CET	443	49876	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.049448967 CET	49881	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.049501896 CET	443	49881	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.049578905 CET	49881	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.049871922 CET	443	49878	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.050223112 CET	49881	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.050240993 CET	443	49881	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.050896883 CET	49878	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.050906897 CET	443	49878	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.052191019 CET	49878	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.052196026 CET	443	49878	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.077056885 CET	443	49879	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.085135937 CET	49879	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.085177898 CET	443	49879	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.086579084 CET	49879	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.086591005 CET	443	49879	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.150280952 CET	443	49877	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.150429010 CET	443	49877	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.150568962 CET	49877	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.154560089 CET	49877	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.154594898 CET	443	49877	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.154633045 CET	49877	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.154649019 CET	443	49877	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.182274103 CET	49882	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.182315111 CET	443	49882	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.182391882 CET	49882	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.183094025 CET	49882	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.183109999 CET	443	49882	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.187005043 CET	443	49878	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.187380075 CET	443	49878	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.187537909 CET	49878	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.187810898 CET	49878	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.187834024 CET	443	49878	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.187846899 CET	49878	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.187851906 CET	443	49878	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.190893888 CET	443	49880	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.192332983 CET	49880	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.192343950 CET	443	49880	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.193541050 CET	49880	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.193547010 CET	443	49880	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.198101997 CET	49883	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.198136091 CET	443	49883	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.198204041 CET	49883	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.198642015 CET	49883	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.198664904 CET	443	49883	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.227577925 CET	443	49879	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.227796078 CET	443	49879	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.227864981 CET	49879	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.228276968 CET	49879	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.228323936 CET	443	49879	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.228357077 CET	49879	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.228370905 CET	443	49879	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.235358000 CET	49884	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.235398054 CET	443	49884	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.235548973 CET	49884	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.235730886 CET	49884	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.235749006 CET	443	49884	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.327835083 CET	443	49880	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.328102112 CET	443	49880	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.328180075 CET	49880	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.328358889 CET	49880	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.328375101 CET	443	49880	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.328393936 CET	49880	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.328401089 CET	443	49880	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.331696033 CET	49885	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.331723928 CET	443	49885	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.332029104 CET	49885	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.332192898 CET	49885	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.332201004 CET	443	49885	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.811460972 CET	443	49881	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.812393904 CET	49881	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.812421083 CET	443	49881	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.813935995 CET	49881	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.813945055 CET	443	49881	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.941751003 CET	443	49882	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.943118095 CET	49882	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.943141937 CET	443	49882	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.944520950 CET	49882	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.944529057 CET	443	49882	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.947767973 CET	443	49881	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.948612928 CET	443	49881	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.948688030 CET	49881	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.948818922 CET	49881	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.948844910 CET	443	49881	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.948859930 CET	49881	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.948868036 CET	443	49881	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.961204052 CET	443	49883	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.980016947 CET	49883	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.980042934 CET	443	49883	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.980882883 CET	49883	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.980891943 CET	443	49883	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.984168053 CET	49886	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.984214067 CET	443	49886	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:48.984311104 CET	49886	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.984534979 CET	49886	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:48.984549999 CET	443	49886	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.007766962 CET	443	49884	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.008364916 CET	49884	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.008378029 CET	443	49884	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.009217024 CET	49884	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.009223938 CET	443	49884	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.079166889 CET	443	49882	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.079260111 CET	443	49882	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.079308033 CET	49882	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.080260038 CET	49882	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.080279112 CET	443	49882	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.080322981 CET	49882	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.080328941 CET	443	49882	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.080914974 CET	443	49885	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.114779949 CET	49885	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.114792109 CET	443	49885	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.126368046 CET	49885	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.126375914 CET	443	49885	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.128231049 CET	443	49883	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.128299952 CET	443	49883	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.128348112 CET	49883	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.133235931 CET	49883	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.133266926 CET	443	49883	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.133280039 CET	49883	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.133286953 CET	443	49883	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.145704985 CET	443	49884	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.145872116 CET	443	49884	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.146107912 CET	49884	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.148647070 CET	49884	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.148647070 CET	49884	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.148667097 CET	443	49884	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.148682117 CET	443	49884	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.195285082 CET	49887	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.195318937 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.195560932 CET	49887	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.201598883 CET	49887	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.201615095 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.205147028 CET	49888	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.205182076 CET	443	49888	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.205256939 CET	49888	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.205425024 CET	49888	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.205432892 CET	443	49888	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.207400084 CET	49889	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.207437038 CET	443	49889	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.207505941 CET	49889	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.208034992 CET	49889	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.208051920 CET	443	49889	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.257435083 CET	443	49885	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.257635117 CET	443	49885	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.257688999 CET	49885	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.257867098 CET	49885	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.257884979 CET	443	49885	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.262528896 CET	49890	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.262556076 CET	443	49890	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.262747049 CET	49890	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.262981892 CET	49890	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.262996912 CET	443	49890	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.762507915 CET	443	49886	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.763122082 CET	49886	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.763154984 CET	443	49886	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.763689041 CET	49886	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.763706923 CET	443	49886	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.903601885 CET	443	49886	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.903845072 CET	443	49886	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.903922081 CET	49886	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.904007912 CET	49886	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.904007912 CET	49886	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.904031038 CET	443	49886	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.904042006 CET	443	49886	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.907440901 CET	49891	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.907536030 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.907618046 CET	49891	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.907804966 CET	49891	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.907841921 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.964994907 CET	443	49889	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.965584040 CET	49889	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.965629101 CET	443	49889	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.966181993 CET	49889	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.966193914 CET	443	49889	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.967628956 CET	443	49888	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.967971087 CET	49888	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.968008995 CET	443	49888	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.968394995 CET	49888	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.968404055 CET	443	49888	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.971174002 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.971709013 CET	49887	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.971731901 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:49.972157001 CET	49887	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:49.972162962 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.010724068 CET	443	49890	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.011179924 CET	49890	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.011204958 CET	443	49890	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.011738062 CET	49890	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.011746883 CET	443	49890	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.131200075 CET	443	49889	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.131284952 CET	443	49889	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.131405115 CET	49889	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.131699085 CET	49889	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.131735086 CET	443	49889	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.131758928 CET	49889	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.131772995 CET	443	49889	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.131802082 CET	443	49888	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.132435083 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.132457018 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.132514000 CET	49887	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.132528067 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.132545948 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.132591963 CET	49887	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.134141922 CET	49887	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.134159088 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.134196997 CET	49887	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.134203911 CET	443	49887	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.134418011 CET	443	49888	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.134473085 CET	49888	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.135500908 CET	49888	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.135521889 CET	443	49888	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.135539055 CET	49888	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.135546923 CET	443	49888	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.140985012 CET	49892	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.141026974 CET	443	49892	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.141093016 CET	49892	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.141654968 CET	49893	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.141700983 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.141756058 CET	49893	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.142793894 CET	49892	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.142818928 CET	443	49892	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.144738913 CET	49893	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.144777060 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.144828081 CET	49894	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.144850016 CET	443	49894	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.144911051 CET	49894	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.145083904 CET	49894	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.145097017 CET	443	49894	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.146049976 CET	443	49890	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.146069050 CET	443	49890	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.146126986 CET	443	49890	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.146127939 CET	49890	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.146414042 CET	49890	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.146589994 CET	49890	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.146595955 CET	443	49890	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.146612883 CET	49890	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.146617889 CET	443	49890	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.150019884 CET	49895	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.150058985 CET	443	49895	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.150295019 CET	49895	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.150552034 CET	49895	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.150567055 CET	443	49895	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.654596090 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.655232906 CET	49891	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.655272961 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.655741930 CET	49891	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.655750990 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.792337894 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.792402983 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.792473078 CET	49891	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.792529106 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.792599916 CET	49891	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.792767048 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.792768955 CET	49891	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.792790890 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.792794943 CET	49891	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.792912960 CET	443	49891	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.795912981 CET	49896	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.795953989 CET	443	49896	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.796027899 CET	49896	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.796262980 CET	49896	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.796278000 CET	443	49896	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.882056952 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.882631063 CET	49893	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.882652998 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.883147955 CET	49893	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.883161068 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.904723883 CET	443	49894	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.905270100 CET	49894	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.905282974 CET	443	49894	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.905869961 CET	49894	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.905875921 CET	443	49894	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.909781933 CET	443	49895	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.910212994 CET	49895	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.910234928 CET	443	49895	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.910696030 CET	49895	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.910707951 CET	443	49895	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.914752007 CET	443	49892	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.915105104 CET	49892	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.915121078 CET	443	49892	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:50.915482998 CET	49892	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:50.915488958 CET	443	49892	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.017385960 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.017405033 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.017477036 CET	49893	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.017499924 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.017554045 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.017663956 CET	49893	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.017754078 CET	49893	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.017781019 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.017807007 CET	49893	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.017824888 CET	443	49893	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.020951986 CET	49897	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.020984888 CET	443	49897	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.021050930 CET	49897	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.021235943 CET	49897	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.021250963 CET	443	49897	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.040894032 CET	443	49894	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.040971994 CET	443	49894	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.041028976 CET	49894	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.041254997 CET	49894	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.041265965 CET	443	49894	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.041275978 CET	49894	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.041290045 CET	443	49894	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.045270920 CET	49898	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.045316935 CET	443	49898	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.045541048 CET	49898	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.045747042 CET	49898	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.045759916 CET	443	49898	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.056319952 CET	443	49895	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.056487083 CET	443	49895	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.056562901 CET	49895	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.056766987 CET	49895	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.056787014 CET	443	49895	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.056823015 CET	49895	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.056835890 CET	443	49895	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.059549093 CET	49899	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.059562922 CET	443	49899	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.059732914 CET	49899	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.059849977 CET	49899	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.059859991 CET	443	49899	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.065690041 CET	443	49892	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.065762997 CET	443	49892	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.065813065 CET	49892	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.065958023 CET	49892	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.065964937 CET	443	49892	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.068186998 CET	49900	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.068222046 CET	443	49900	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.068294048 CET	49900	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.068535089 CET	49900	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.068547964 CET	443	49900	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.565004110 CET	443	49896	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.565628052 CET	49896	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.565659046 CET	443	49896	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.566171885 CET	49896	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.566180944 CET	443	49896	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.701042891 CET	443	49896	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.701519966 CET	443	49896	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.701626062 CET	49896	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.701673985 CET	49896	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.701689959 CET	443	49896	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.701703072 CET	49896	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.701709032 CET	443	49896	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.705538988 CET	49901	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.705574989 CET	443	49901	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.705645084 CET	49901	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.705795050 CET	49901	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.705807924 CET	443	49901	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.805299997 CET	443	49899	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.805871010 CET	49899	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.805903912 CET	443	49899	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.806444883 CET	49899	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.806452036 CET	443	49899	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.807255030 CET	443	49900	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.807668924 CET	49900	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.807682991 CET	443	49900	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.807893038 CET	49900	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.807898998 CET	443	49900	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.815562010 CET	443	49898	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.815936089 CET	49898	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.815953016 CET	443	49898	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.816287994 CET	49898	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.816293955 CET	443	49898	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.941150904 CET	443	49899	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.941907883 CET	443	49899	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.941973925 CET	49899	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.942054033 CET	49899	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.942075014 CET	443	49899	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.942082882 CET	49899	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.942080975 CET	443	49900	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.942090988 CET	443	49899	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.942250013 CET	443	49900	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.942303896 CET	49900	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.942493916 CET	49900	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.942511082 CET	443	49900	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.942528963 CET	49900	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.942533970 CET	443	49900	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.945367098 CET	49903	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.945369959 CET	49902	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.945384979 CET	443	49903	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.945398092 CET	443	49902	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.945483923 CET	49902	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.945486069 CET	49903	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.945645094 CET	49902	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.945646048 CET	49903	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.945653915 CET	443	49903	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.945657969 CET	443	49902	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.958623886 CET	443	49898	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.958688021 CET	443	49898	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.958745956 CET	49898	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.958904028 CET	49898	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.958916903 CET	443	49898	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.958987951 CET	49898	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.958993912 CET	443	49898	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.961174965 CET	49904	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.961224079 CET	443	49904	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:51.961291075 CET	49904	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.961436033 CET	49904	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:51.961456060 CET	443	49904	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.001221895 CET	443	49897	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.001684904 CET	49897	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.001724958 CET	443	49897	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.002126932 CET	49897	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.002134085 CET	443	49897	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.137599945 CET	443	49897	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.137774944 CET	443	49897	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.137844086 CET	49897	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.138003111 CET	49897	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.138027906 CET	443	49897	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.138045073 CET	49897	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.138052940 CET	443	49897	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.141037941 CET	49905	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.141068935 CET	443	49905	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.141144037 CET	49905	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.141331911 CET	49905	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.141343117 CET	443	49905	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.473794937 CET	443	49901	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.474503040 CET	49901	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.474515915 CET	443	49901	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.474946976 CET	49901	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.474951982 CET	443	49901	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.864177942 CET	443	49901	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.864250898 CET	443	49901	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.864304066 CET	49901	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.864543915 CET	49901	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.864563942 CET	443	49901	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.864574909 CET	49901	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.864583015 CET	443	49901	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.867867947 CET	49906	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.867881060 CET	443	49906	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:52.867944956 CET	49906	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.868158102 CET	49906	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:52.868169069 CET	443	49906	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.009000063 CET	443	49904	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.009279013 CET	443	49903	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.009624004 CET	49904	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.009654045 CET	443	49904	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.009864092 CET	49903	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.009886980 CET	443	49903	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.010180950 CET	49904	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.010189056 CET	443	49904	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.010312080 CET	49903	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.010318995 CET	443	49903	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.011559963 CET	443	49902	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.011940002 CET	49902	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.011965990 CET	443	49902	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.012227058 CET	443	49905	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.012367010 CET	49902	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.012373924 CET	443	49902	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.012598991 CET	49905	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.012620926 CET	443	49905	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.012979984 CET	49905	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.012984037 CET	443	49905	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.160260916 CET	443	49904	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.160331011 CET	443	49904	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.160640001 CET	49904	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.160684109 CET	49904	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.160684109 CET	49904	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.160703897 CET	443	49904	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.160715103 CET	443	49904	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.161104918 CET	443	49903	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.161128044 CET	443	49903	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.161137104 CET	443	49902	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.161178112 CET	443	49903	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.161211967 CET	443	49902	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.161233902 CET	49903	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.161233902 CET	49903	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.161319971 CET	49903	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.161329031 CET	49902	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.161334038 CET	443	49903	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.161360025 CET	49903	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.161366940 CET	443	49903	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.161437988 CET	49902	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.161437988 CET	49902	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.161452055 CET	443	49902	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.161463976 CET	443	49902	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.162882090 CET	443	49905	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.162908077 CET	443	49905	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.162957907 CET	443	49905	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.162983894 CET	49905	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.163110971 CET	49905	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.163110971 CET	49905	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.163316011 CET	49905	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.163331985 CET	443	49905	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.164743900 CET	49908	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.164768934 CET	443	49908	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.164941072 CET	49908	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.165282011 CET	49909	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.165311098 CET	443	49909	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.165509939 CET	49909	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.166011095 CET	49910	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.166011095 CET	49908	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.166021109 CET	443	49910	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.166038990 CET	443	49908	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.166369915 CET	49911	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.166369915 CET	49909	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.166373014 CET	49910	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.166388988 CET	443	49911	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.166405916 CET	443	49909	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.166534901 CET	49911	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.166534901 CET	49911	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.166557074 CET	443	49911	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.166562080 CET	49910	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.166573048 CET	443	49910	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.537650108 CET	443	49855	142.250.186.36	192.168.2.4
Oct 28, 2024 18:03:53.537707090 CET	443	49855	142.250.186.36	192.168.2.4
Oct 28, 2024 18:03:53.537879944 CET	49855	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:03:53.644606113 CET	443	49906	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.645704031 CET	49906	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.645704031 CET	49906	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.645735025 CET	443	49906	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.645754099 CET	443	49906	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.786324024 CET	443	49906	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.786494970 CET	443	49906	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.786608934 CET	49906	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.786735058 CET	49906	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.786751986 CET	443	49906	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.786784887 CET	49906	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.786792040 CET	443	49906	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.789885044 CET	49912	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.789918900 CET	443	49912	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.790029049 CET	49912	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.790214062 CET	49912	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.790225983 CET	443	49912	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.915113926 CET	443	49909	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.915872097 CET	49909	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.915882111 CET	443	49909	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.916413069 CET	49909	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.916418076 CET	443	49909	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.924127102 CET	443	49910	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.924503088 CET	49910	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.924521923 CET	443	49910	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.925272942 CET	49910	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.925280094 CET	443	49910	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.930407047 CET	443	49908	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.931113005 CET	49908	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.931113005 CET	49908	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.931123018 CET	443	49908	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.931138039 CET	443	49908	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.942992926 CET	443	49911	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.943456888 CET	49911	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.943470955 CET	443	49911	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:53.944068909 CET	49911	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:53.944072962 CET	443	49911	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.051429987 CET	443	49909	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.051444054 CET	443	49909	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.051510096 CET	443	49909	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.051551104 CET	49909	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.051551104 CET	49909	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.051809072 CET	49909	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.051809072 CET	49909	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.051821947 CET	443	49909	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.051831007 CET	443	49909	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.055710077 CET	49913	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.055769920 CET	443	49913	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.055924892 CET	49913	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.056251049 CET	49913	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.056268930 CET	443	49913	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.065057993 CET	443	49910	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.065149069 CET	443	49910	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.065316916 CET	49910	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.065316916 CET	49910	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.065530062 CET	49910	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.065546036 CET	443	49910	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.067936897 CET	49914	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.067971945 CET	443	49914	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.068085909 CET	49914	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.068249941 CET	49914	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.068268061 CET	443	49914	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.074794054 CET	443	49908	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.075627089 CET	443	49908	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.075717926 CET	49908	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.075717926 CET	49908	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.075742006 CET	49908	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.075754881 CET	443	49908	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.078037977 CET	49915	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.078075886 CET	443	49915	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.078372955 CET	49915	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.078412056 CET	49915	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.078424931 CET	443	49915	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.089212894 CET	443	49911	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.089561939 CET	443	49911	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.089641094 CET	49911	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.089641094 CET	49911	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.090027094 CET	49911	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.090038061 CET	443	49911	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.092086077 CET	49916	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.092127085 CET	443	49916	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.092327118 CET	49916	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.092327118 CET	49916	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.092384100 CET	443	49916	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.360512972 CET	49855	443	192.168.2.4	142.250.186.36
Oct 28, 2024 18:03:54.360532045 CET	443	49855	142.250.186.36	192.168.2.4
Oct 28, 2024 18:03:54.587652922 CET	443	49912	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.588393927 CET	49912	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.588413000 CET	443	49912	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.590615988 CET	49912	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.590632915 CET	443	49912	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.732337952 CET	443	49912	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.732418060 CET	443	49912	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.732536077 CET	49912	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.732789040 CET	49912	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.732805967 CET	443	49912	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.732836962 CET	49912	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.732842922 CET	443	49912	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.735744953 CET	49918	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.735806942 CET	443	49918	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.736046076 CET	49918	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.736046076 CET	49918	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.736114025 CET	443	49918	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.812241077 CET	443	49913	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.813200951 CET	49913	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.813225985 CET	443	49913	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.814656019 CET	49913	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.814661026 CET	443	49913	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.819037914 CET	443	49914	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.823052883 CET	49914	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.823070049 CET	443	49914	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.826611042 CET	49914	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.826620102 CET	443	49914	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.840147972 CET	443	49915	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.843426943 CET	49915	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.843445063 CET	443	49915	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.843575001 CET	49915	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.843579054 CET	443	49915	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.859004021 CET	443	49916	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.859607935 CET	49916	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.859647036 CET	443	49916	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.859908104 CET	49916	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.859920979 CET	443	49916	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.953165054 CET	443	49913	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.953253031 CET	443	49913	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.953545094 CET	49913	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.953603029 CET	49913	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.953603029 CET	49913	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.953623056 CET	443	49913	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.953632116 CET	443	49913	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.956661940 CET	49919	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.956696987 CET	443	49919	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.956882000 CET	49919	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.957015038 CET	49919	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.957037926 CET	443	49919	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.958240986 CET	443	49914	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.958276987 CET	443	49914	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.958337069 CET	443	49914	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.958446026 CET	49914	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.958513975 CET	49914	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.958513975 CET	49914	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.958539009 CET	443	49914	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.958548069 CET	443	49914	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.960777998 CET	49920	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.960814953 CET	443	49920	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.961034060 CET	49920	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.961034060 CET	49920	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.961062908 CET	443	49920	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.996946096 CET	443	49915	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.996999025 CET	443	49915	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.997176886 CET	49915	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.997221947 CET	49915	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.997221947 CET	49915	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.997232914 CET	443	49915	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.997241020 CET	443	49915	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.999613047 CET	49921	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.999643087 CET	443	49921	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:54.999772072 CET	49921	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.999905109 CET	49921	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:54.999923944 CET	443	49921	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.005145073 CET	443	49916	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.005222082 CET	443	49916	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.005338907 CET	443	49916	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.005434036 CET	49916	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.005434036 CET	49916	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.005521059 CET	49916	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.005521059 CET	49916	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.005552053 CET	443	49916	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.005575895 CET	443	49916	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.007364988 CET	49922	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.007385969 CET	443	49922	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.007488966 CET	49922	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.007555008 CET	49922	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.007565022 CET	443	49922	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.505769968 CET	443	49918	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.506433010 CET	49918	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.506458044 CET	443	49918	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.506936073 CET	49918	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.506963015 CET	443	49918	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.641611099 CET	443	49918	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.641771078 CET	443	49918	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.641839981 CET	49918	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.642044067 CET	49918	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.642044067 CET	49918	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.642088890 CET	443	49918	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.642119884 CET	443	49918	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.645798922 CET	49923	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.645832062 CET	443	49923	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.645926952 CET	49923	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.646065950 CET	49923	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.646079063 CET	443	49923	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.715396881 CET	443	49919	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.717365980 CET	49919	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.717384100 CET	443	49919	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.717889071 CET	49919	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.717895985 CET	443	49919	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.731205940 CET	443	49920	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.732170105 CET	49920	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.732183933 CET	443	49920	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.733129025 CET	49920	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.733135939 CET	443	49920	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.768644094 CET	443	49921	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.768771887 CET	443	49922	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.769567966 CET	49921	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.769593000 CET	443	49921	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.770296097 CET	49922	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.770309925 CET	443	49922	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.770365953 CET	49921	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.770379066 CET	443	49921	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.770689964 CET	49922	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.770693064 CET	443	49922	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.853583097 CET	443	49919	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.853652000 CET	443	49919	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.853812933 CET	49919	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.855523109 CET	49919	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.855545044 CET	443	49919	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.855559111 CET	49919	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.855565071 CET	443	49919	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.863972902 CET	49924	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.864006042 CET	443	49924	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.864212990 CET	49924	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.865187883 CET	49924	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.865202904 CET	443	49924	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.868201971 CET	443	49920	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.868393898 CET	443	49920	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.868501902 CET	49920	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.868571997 CET	49920	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.868583918 CET	443	49920	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.868596077 CET	49920	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.868601084 CET	443	49920	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.872102976 CET	49925	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.872148991 CET	443	49925	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.872611046 CET	49925	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.873867035 CET	49925	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.873878002 CET	443	49925	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.907767057 CET	443	49921	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.907939911 CET	443	49921	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.907994986 CET	443	49921	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.908019066 CET	49921	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.908041954 CET	49921	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.908200979 CET	443	49922	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.908309937 CET	49921	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.908324003 CET	443	49921	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.908366919 CET	443	49922	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.908371925 CET	49921	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.908384085 CET	443	49921	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.908426046 CET	49922	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.908516884 CET	49922	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.908529043 CET	443	49922	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.908538103 CET	49922	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.908541918 CET	443	49922	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.912555933 CET	49926	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.912600040 CET	443	49926	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.912663937 CET	49926	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.912801981 CET	49927	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.912834883 CET	443	49927	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.912904024 CET	49927	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.913255930 CET	49926	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.913276911 CET	443	49926	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:55.913553953 CET	49927	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:55.913567066 CET	443	49927	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.412858963 CET	443	49923	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.413384914 CET	49923	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.413407087 CET	443	49923	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.414052963 CET	49923	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.414060116 CET	443	49923	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.554961920 CET	443	49923	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.555049896 CET	443	49923	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.555135012 CET	49923	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.555594921 CET	49923	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.555613041 CET	443	49923	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.555624008 CET	49923	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.555629969 CET	443	49923	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.558429956 CET	49928	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.558463097 CET	443	49928	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.558538914 CET	49928	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.558722019 CET	49928	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.558737040 CET	443	49928	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.623049021 CET	443	49924	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.623682976 CET	49924	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.623703003 CET	443	49924	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.624145985 CET	49924	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.624160051 CET	443	49924	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.639740944 CET	443	49925	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.640666008 CET	49925	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.640666008 CET	49925	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.640683889 CET	443	49925	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.640697956 CET	443	49925	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.684135914 CET	443	49926	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.684674025 CET	49926	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.684693098 CET	443	49926	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.685271025 CET	49926	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.685278893 CET	443	49926	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.686841011 CET	443	49927	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.687242985 CET	49927	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.687266111 CET	443	49927	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.687875032 CET	49927	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.687884092 CET	443	49927	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.759779930 CET	443	49924	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.760566950 CET	443	49924	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.760623932 CET	49924	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.760659933 CET	49924	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.760680914 CET	443	49924	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.760699987 CET	49924	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.760709047 CET	443	49924	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.763686895 CET	49929	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.763731956 CET	443	49929	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.763792038 CET	49929	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.763979912 CET	49929	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.763993025 CET	443	49929	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.778808117 CET	443	49925	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.778832912 CET	443	49925	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.778878927 CET	443	49925	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.778935909 CET	49925	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.778935909 CET	49925	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.779155970 CET	49925	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.779155970 CET	49925	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.779169083 CET	443	49925	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.779176950 CET	443	49925	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.782478094 CET	49930	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.782510996 CET	443	49930	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.782572031 CET	49930	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.782692909 CET	49930	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.782710075 CET	443	49930	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.823565006 CET	443	49926	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.823628902 CET	443	49926	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.823834896 CET	49926	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.823834896 CET	49926	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.823895931 CET	49926	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.823914051 CET	443	49926	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.826353073 CET	49931	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.826445103 CET	443	49931	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.826535940 CET	49931	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.826683998 CET	49931	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.826716900 CET	443	49931	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.827233076 CET	443	49927	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.827414989 CET	443	49927	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.827497959 CET	49927	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.827497959 CET	49927	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.827497959 CET	49927	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.829785109 CET	49932	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.829844952 CET	443	49932	13.107.253.45	192.168.2.4
Oct 28, 2024 18:03:56.829917908 CET	49932	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.830092907 CET	49932	443	192.168.2.4	13.107.253.45
Oct 28, 2024 18:03:56.830118895 CET	443	49932	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 18:02:38.123332977 CET	53	59173	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:38.582820892 CET	53	58236	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:40.065046072 CET	57736	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:40.065449953 CET	58260	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:40.073278904 CET	53	58260	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:40.077078104 CET	53	57736	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:40.172102928 CET	53	60961	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:41.028791904 CET	62620	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:41.029491901 CET	52324	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:42.609946012 CET	50505	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:42.610241890 CET	64487	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:42.617662907 CET	53	64487	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:42.617872000 CET	53	50505	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:47.792581081 CET	53691	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:47.795562983 CET	59118	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:47.803083897 CET	53	53691	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:47.807491064 CET	53	59118	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:49.510145903 CET	59731	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:49.510447979 CET	62977	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:49.827085972 CET	60633	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:49.827270985 CET	56151	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:49.827605009 CET	63900	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:49.827780962 CET	50833	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:49.837384939 CET	53	63900	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:49.840080023 CET	53	50833	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:50.919693947 CET	62599	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:50.919856071 CET	52834	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:52.886529922 CET	58744	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:52.887016058 CET	57116	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:55.445188046 CET	138	138	192.168.2.4	192.168.2.255
Oct 28, 2024 18:02:57.383049965 CET	53	60292	1.1.1.1	192.168.2.4
Oct 28, 2024 18:02:57.661909103 CET	51704	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:02:57.662379980 CET	51084	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:14.630013943 CET	50639	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:14.630203009 CET	57304	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:14.631603956 CET	64376	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:14.632685900 CET	57684	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:14.638309956 CET	53	50639	1.1.1.1	192.168.2.4
Oct 28, 2024 18:03:14.639894009 CET	53	57304	1.1.1.1	192.168.2.4
Oct 28, 2024 18:03:16.110827923 CET	57701	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:16.110963106 CET	52369	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:16.118546009 CET	53	52369	1.1.1.1	192.168.2.4
Oct 28, 2024 18:03:16.119600058 CET	53	57701	1.1.1.1	192.168.2.4
Oct 28, 2024 18:03:16.674468994 CET	53	49688	1.1.1.1	192.168.2.4
Oct 28, 2024 18:03:20.306607962 CET	51903	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:20.306967020 CET	56479	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:20.319658041 CET	53186	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:20.319935083 CET	65087	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:21.537000895 CET	52757	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:21.537472010 CET	56901	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:22.009788036 CET	54533	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:22.009917974 CET	58580	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:22.834954023 CET	54409	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:22.835113049 CET	49588	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:37.980300903 CET	53	58840	1.1.1.1	192.168.2.4
Oct 28, 2024 18:03:39.430973053 CET	53	60969	1.1.1.1	192.168.2.4
Oct 28, 2024 18:03:54.360991955 CET	49596	53	192.168.2.4	1.1.1.1
Oct 28, 2024 18:03:54.361238003 CET	55646	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 28, 2024 18:02:41.051752090 CET	192.168.2.4	1.1.1.1	c2c5	(Port unreachable)	Destination Unreachable
Oct 28, 2024 18:02:49.562001944 CET	192.168.2.4	1.1.1.1	c2d4	(Port unreachable)	Destination Unreachable
Oct 28, 2024 18:02:50.996918917 CET	192.168.2.4	1.1.1.1	c2d4	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 18:02:40.065046072 CET	192.168.2.4	1.1.1.1	0xbf0b	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:40.065449953 CET	192.168.2.4	1.1.1.1	0x8195	Standard query (0)	1drv.ms	65	IN (0x0001)	false
Oct 28, 2024 18:02:41.028791904 CET	192.168.2.4	1.1.1.1	0xce53	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:41.029491901 CET	192.168.2.4	1.1.1.1	0x2a68	Standard query (0)	onedrive.live.com	65	IN (0x0001)	false
Oct 28, 2024 18:02:42.609946012 CET	192.168.2.4	1.1.1.1	0x246c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:42.610241890 CET	192.168.2.4	1.1.1.1	0x78e4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 28, 2024 18:02:47.792581081 CET	192.168.2.4	1.1.1.1	0xcd42	Standard query (0)	api-badgerp.svc.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:47.795562983 CET	192.168.2.4	1.1.1.1	0xd546	Standard query (0)	api-badgerp.svc.ms	65	IN (0x0001)	false
Oct 28, 2024 18:02:49.510145903 CET	192.168.2.4	1.1.1.1	0x52f9	Standard query (0)	p.sfx.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:49.510447979 CET	192.168.2.4	1.1.1.1	0xe6a	Standard query (0)	p.sfx.ms	65	IN (0x0001)	false
Oct 28, 2024 18:02:49.827085972 CET	192.168.2.4	1.1.1.1	0xae8f	Standard query (0)	my.microsoftpersonalcontent.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:49.827270985 CET	192.168.2.4	1.1.1.1	0xdac1	Standard query (0)	my.microsoftpersonalcontent.com	65	IN (0x0001)	false
Oct 28, 2024 18:02:49.827605009 CET	192.168.2.4	1.1.1.1	0x700f	Standard query (0)	api-badgerp.svc.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:49.827780962 CET	192.168.2.4	1.1.1.1	0xb481	Standard query (0)	api-badgerp.svc.ms	65	IN (0x0001)	false
Oct 28, 2024 18:02:50.919693947 CET	192.168.2.4	1.1.1.1	0x7d98	Standard query (0)	p.sfx.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:50.919856071 CET	192.168.2.4	1.1.1.1	0x68f5	Standard query (0)	p.sfx.ms	65	IN (0x0001)	false
Oct 28, 2024 18:02:52.886529922 CET	192.168.2.4	1.1.1.1	0xc9a6	Standard query (0)	spo.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:52.887016058 CET	192.168.2.4	1.1.1.1	0x4a0	Standard query (0)	spo.nel.measure.office.net	65	IN (0x0001)	false
Oct 28, 2024 18:02:57.661909103 CET	192.168.2.4	1.1.1.1	0xbd91	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:57.662379980 CET	192.168.2.4	1.1.1.1	0xbe9a	Standard query (0)	onedrive.live.com	65	IN (0x0001)	false
Oct 28, 2024 18:03:14.630013943 CET	192.168.2.4	1.1.1.1	0x8a55	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:14.630203009 CET	192.168.2.4	1.1.1.1	0xd8db	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Oct 28, 2024 18:03:14.631603956 CET	192.168.2.4	1.1.1.1	0xdf2e	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:14.632685900 CET	192.168.2.4	1.1.1.1	0x73f	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Oct 28, 2024 18:03:16.110827923 CET	192.168.2.4	1.1.1.1	0x26cd	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:16.110963106 CET	192.168.2.4	1.1.1.1	0x533d	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Oct 28, 2024 18:03:20.306607962 CET	192.168.2.4	1.1.1.1	0x7cf7	Standard query (0)	assets.onestore.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:20.306967020 CET	192.168.2.4	1.1.1.1	0xb64f	Standard query (0)	assets.onestore.ms	65	IN (0x0001)	false
Oct 28, 2024 18:03:20.319658041 CET	192.168.2.4	1.1.1.1	0xeb5e	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:20.319935083 CET	192.168.2.4	1.1.1.1	0x6eed	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Oct 28, 2024 18:03:21.537000895 CET	192.168.2.4	1.1.1.1	0xbc36	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:21.537472010 CET	192.168.2.4	1.1.1.1	0x84cf	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Oct 28, 2024 18:03:22.009788036 CET	192.168.2.4	1.1.1.1	0x4d7	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:22.009917974 CET	192.168.2.4	1.1.1.1	0xc8e9	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Oct 28, 2024 18:03:22.834954023 CET	192.168.2.4	1.1.1.1	0xd766	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:22.835113049 CET	192.168.2.4	1.1.1.1	0x68ad	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Oct 28, 2024 18:03:54.360991955 CET	192.168.2.4	1.1.1.1	0x6124	Standard query (0)	spo.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:54.361238003 CET	192.168.2.4	1.1.1.1	0x811e	Standard query (0)	spo.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 18:02:40.077078104 CET	1.1.1.1	192.168.2.4	0xbf0b	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:41.036915064 CET	1.1.1.1	192.168.2.4	0xce53	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:41.036915064 CET	1.1.1.1	192.168.2.4	0xce53	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:41.036915064 CET	1.1.1.1	192.168.2.4	0xce53	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:41.036915064 CET	1.1.1.1	192.168.2.4	0xce53	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:41.036915064 CET	1.1.1.1	192.168.2.4	0xce53	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:41.051692009 CET	1.1.1.1	192.168.2.4	0x2a68	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:41.051692009 CET	1.1.1.1	192.168.2.4	0x2a68	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:42.617662907 CET	1.1.1.1	192.168.2.4	0x78e4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 28, 2024 18:02:42.617872000 CET	1.1.1.1	192.168.2.4	0x246c	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:47.803083897 CET	1.1.1.1	192.168.2.4	0xcd42	No error (0)	api-badgerp.svc.ms	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:47.803083897 CET	1.1.1.1	192.168.2.4	0xcd42	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:47.803083897 CET	1.1.1.1	192.168.2.4	0xcd42	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:47.807491064 CET	1.1.1.1	192.168.2.4	0xd546	No error (0)	api-badgerp.svc.ms	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.519433975 CET	1.1.1.1	192.168.2.4	0x52f9	No error (0)	p.sfx.ms	odwebp.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.519433975 CET	1.1.1.1	192.168.2.4	0x52f9	No error (0)	odsp-odweb-webfe-lb.eurwesteur107255.odsp-odweb-webfe.westeurope-prod.cosmic.office.net	cosmic-westeurope-ns-ceb6f0ee85ee.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.561867952 CET	1.1.1.1	192.168.2.4	0xe6a	No error (0)	p.sfx.ms	odwebp.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.561867952 CET	1.1.1.1	192.168.2.4	0xe6a	No error (0)	odsp-odweb-webfe-lb.eurwesteur001307.odsp-odweb-webfe.westeurope-prod.cosmic.office.net	cosmic-westeurope-ns-cbf6e4cb41a8.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836014986 CET	1.1.1.1	192.168.2.4	0xae8f	No error (0)	my.microsoftpersonalcontent.com	lists-e.tm-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836014986 CET	1.1.1.1	192.168.2.4	0xae8f	No error (0)	lists-e.tm-rt.sharepoint.com	190400-ipv4mte.gr.global.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836014986 CET	1.1.1.1	192.168.2.4	0xae8f	No error (0)	190400-ipv4mte.gr.global.aa-rt.sharepoint.com	190400-ipv4mte.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836014986 CET	1.1.1.1	192.168.2.4	0xae8f	No error (0)	190400-ipv4mte.farm.dprodmgd104.aa-rt.sharepoint.com	190400-ipv4mteg.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836014986 CET	1.1.1.1	192.168.2.4	0xae8f	No error (0)	190400-ipv4.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836014986 CET	1.1.1.1	192.168.2.4	0xae8f	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836014986 CET	1.1.1.1	192.168.2.4	0xae8f	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836743116 CET	1.1.1.1	192.168.2.4	0xdac1	No error (0)	my.microsoftpersonalcontent.com	lists-e.tm-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836743116 CET	1.1.1.1	192.168.2.4	0xdac1	No error (0)	lists-e.tm-rt.sharepoint.com	190410-ipv4mte.gr.global.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836743116 CET	1.1.1.1	192.168.2.4	0xdac1	No error (0)	190410-ipv4mte.gr.global.aa-rt.sharepoint.com	190410-ipv4mte.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.836743116 CET	1.1.1.1	192.168.2.4	0xdac1	No error (0)	190410-ipv4mte.farm.dprodmgd104.aa-rt.sharepoint.com	190410-ipv4mteg.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.837384939 CET	1.1.1.1	192.168.2.4	0x700f	No error (0)	api-badgerp.svc.ms	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:49.837384939 CET	1.1.1.1	192.168.2.4	0x700f	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:49.837384939 CET	1.1.1.1	192.168.2.4	0x700f	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:49.840080023 CET	1.1.1.1	192.168.2.4	0xb481	No error (0)	api-badgerp.svc.ms	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:50.941381931 CET	1.1.1.1	192.168.2.4	0x7d98	No error (0)	p.sfx.ms	odwebp.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:50.941381931 CET	1.1.1.1	192.168.2.4	0x7d98	No error (0)	odsp-odweb-webfe-lb.eurwesteur107255.odsp-odweb-webfe.westeurope-prod.cosmic.office.net	cosmic-westeurope-ns-ceb6f0ee85ee.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:50.996807098 CET	1.1.1.1	192.168.2.4	0x68f5	No error (0)	p.sfx.ms	odwebp.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:50.996807098 CET	1.1.1.1	192.168.2.4	0x68f5	No error (0)	odsp-odweb-webfe-lb.eurwesteur001307.odsp-odweb-webfe.westeurope-prod.cosmic.office.net	cosmic-westeurope-ns-cbf6e4cb41a8.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:52.895277023 CET	1.1.1.1	192.168.2.4	0xc9a6	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:52.895289898 CET	1.1.1.1	192.168.2.4	0x4a0	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:55.125000954 CET	1.1.1.1	192.168.2.4	0xcf28	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:55.125000954 CET	1.1.1.1	192.168.2.4	0xcf28	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:57.670142889 CET	1.1.1.1	192.168.2.4	0xbd91	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:57.670142889 CET	1.1.1.1	192.168.2.4	0xbd91	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:57.670142889 CET	1.1.1.1	192.168.2.4	0xbd91	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:57.670142889 CET	1.1.1.1	192.168.2.4	0xbd91	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:57.670142889 CET	1.1.1.1	192.168.2.4	0xbd91	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:02:57.670274973 CET	1.1.1.1	192.168.2.4	0xbe9a	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:02:57.670274973 CET	1.1.1.1	192.168.2.4	0xbe9a	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:07.234179974 CET	1.1.1.1	192.168.2.4	0x5253	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:07.234179974 CET	1.1.1.1	192.168.2.4	0x5253	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:14.638309956 CET	1.1.1.1	192.168.2.4	0x8a55	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.638309956 CET	1.1.1.1	192.168.2.4	0x8a55	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.638309956 CET	1.1.1.1	192.168.2.4	0x8a55	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:14.639894009 CET	1.1.1.1	192.168.2.4	0xd8db	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.639894009 CET	1.1.1.1	192.168.2.4	0xd8db	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.640027046 CET	1.1.1.1	192.168.2.4	0x1efa	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.640027046 CET	1.1.1.1	192.168.2.4	0x1efa	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:14.640800953 CET	1.1.1.1	192.168.2.4	0xdf2e	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.640800953 CET	1.1.1.1	192.168.2.4	0xdf2e	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.640800953 CET	1.1.1.1	192.168.2.4	0xdf2e	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:14.641447067 CET	1.1.1.1	192.168.2.4	0x73f	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.641447067 CET	1.1.1.1	192.168.2.4	0x73f	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.651556969 CET	1.1.1.1	192.168.2.4	0x73c8	No error (0)	shed.dual-low.s-part-0036.t-0009.t-msedge.net	s-part-0036.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.651556969 CET	1.1.1.1	192.168.2.4	0x73c8	No error (0)	s-part-0036.t-0009.t-msedge.net		13.107.246.64	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:14.654905081 CET	1.1.1.1	192.168.2.4	0xb088	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.655033112 CET	1.1.1.1	192.168.2.4	0xcf06	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.655033112 CET	1.1.1.1	192.168.2.4	0xcf06	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:14.657913923 CET	1.1.1.1	192.168.2.4	0x932e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.657913923 CET	1.1.1.1	192.168.2.4	0x932e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:14.666126013 CET	1.1.1.1	192.168.2.4	0xdbaf	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.666126013 CET	1.1.1.1	192.168.2.4	0xdbaf	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:14.667531013 CET	1.1.1.1	192.168.2.4	0xac66	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.698564053 CET	1.1.1.1	192.168.2.4	0x4a1	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.698564053 CET	1.1.1.1	192.168.2.4	0x4a1	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:14.698564053 CET	1.1.1.1	192.168.2.4	0x4a1	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:16.118546009 CET	1.1.1.1	192.168.2.4	0x533d	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:16.118546009 CET	1.1.1.1	192.168.2.4	0x533d	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:16.119600058 CET	1.1.1.1	192.168.2.4	0x26cd	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:16.119600058 CET	1.1.1.1	192.168.2.4	0x26cd	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:16.119600058 CET	1.1.1.1	192.168.2.4	0x26cd	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:20.315150976 CET	1.1.1.1	192.168.2.4	0x7cf7	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:20.315188885 CET	1.1.1.1	192.168.2.4	0xb64f	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:20.327672005 CET	1.1.1.1	192.168.2.4	0x6eed	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:20.328170061 CET	1.1.1.1	192.168.2.4	0xeb5e	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:21.545078993 CET	1.1.1.1	192.168.2.4	0xbc36	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:21.545170069 CET	1.1.1.1	192.168.2.4	0x84cf	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:22.017357111 CET	1.1.1.1	192.168.2.4	0xc8e9	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:22.018079042 CET	1.1.1.1	192.168.2.4	0x4d7	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:22.843230963 CET	1.1.1.1	192.168.2.4	0xd766	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:22.843481064 CET	1.1.1.1	192.168.2.4	0x68ad	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:31.713859081 CET	1.1.1.1	192.168.2.4	0xd8f3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:31.713859081 CET	1.1.1.1	192.168.2.4	0xd8f3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:32.949911118 CET	1.1.1.1	192.168.2.4	0x1edc	No error (0)	shed.dual-low.s-part-0015.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:32.949911118 CET	1.1.1.1	192.168.2.4	0x1edc	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:32.949911118 CET	1.1.1.1	192.168.2.4	0x1edc	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:51.351475000 CET	1.1.1.1	192.168.2.4	0x43fa	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:51.351475000 CET	1.1.1.1	192.168.2.4	0x43fa	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:51.351475000 CET	1.1.1.1	192.168.2.4	0x43fa	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 18:03:54.370358944 CET	1.1.1.1	192.168.2.4	0x811e	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 18:03:54.370676994 CET	1.1.1.1	192.168.2.4	0x6124	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

1drv.ms

onedrive.live.com

fs.microsoft.com

https:

api-badgerp.svc.ms

my.microsoftpersonalcontent.com

logincdn.msftauth.net

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	13.107.42.12	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:40 UTC	712	OUT	GET /o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9 HTTP/1.1 Host: 1drv.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:02:41 UTC	653	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=06196B45DC4479E7!474&ithint=onenote&e=J67qxK-KfEurqpMk0dasTw&at=9&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05 X-MSNSERVER: BL4PPF3468D4106 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: pQkBT27GXEmpRCSYqykNXg.0 X-AsmVersion: UNKNOWN; 19.1528.1008.2006 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 306D7893116547CD8BEE459C977D3623 Ref B: DFW30EDGE0414 Ref C: 2024-10-28T17:02:40Z Date: Mon, 28 Oct 2024 17:02:40 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	13.107.137.11	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:41 UTC	868	OUT	GET /redir?resid=06196B45DC4479E7!474&ithint=onenote&e=J67qxK-KfEurqpMk0dasTw&at=9&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05 HTTP/1.1 Host: onedrive.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:02:42 UTC	1230	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 370 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /edit?id=06196B45DC4479E7!474&resid=06196B45DC4479E7!474&ithint=onenote&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05&migratedtospo=true&wdo=2&cid=06196b45dc4479e7 Set-Cookie: E=P:62XqVXL33Ig=:VqvC1jqIACslm1EiZmC/w1L0JzuVT0Ci0sfYTRn7CXc=:F; domain=.live.com; path=/ Set-Cookie: xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Mon, 28-Oct-2024 15:22:41 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 7dc88597df-428dq X-ODWebServer: namsouthce155880-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DDBC31547DC84A24B6F5F997D1C6E288 Ref B: SN1EDGE2211 Ref C: 2024-10-28T17:02:41Z Date: Mon, 28 Oct 2024 17:02:41 GMT Connection: close
2024-10-28 17:02:42 UTC	370	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 65 64 69 74 3f 69 64 3d 30 36 31 39 36 42 34 35 44 43 34 34 37 39 45 37 21 34 37 34 26 61 6d 70 3b 72 65 73 69 64 3d 30 36 31 39 36 42 34 35 44 43 34 34 37 39 45 37 21 34 37 34 26 61 6d 70 3b 69 74 68 69 6e 74 3d 6f 6e 65 6e 6f 74 65 26 61 6d 70 3b 72 65 64 65 65 6d 3d 61 48 52 30 63 48 4d 36 4c 79 38 78 5a 48 4a 32 4c 6d 31 7a 4c 32 38 76 63 79 46 43 54 32 51 31 55 6b 35 34 52 6d 46 34 61 30 64 6e 4d 58 49 31 59 6d 4d 7a 4d 47 4a 6e 55 56 64 74 61 30 35 6a 50 32 55 39 53 6a 59 33 63 58 68 4c 4c 55 74 6d 52 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/edit?id=06196B45DC4479E7!474&resid=06196B45DC4479E7!474&ithint=onenote&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	13.107.137.11	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:42 UTC	1034	OUT	GET /edit?id=06196B45DC4479E7!474&resid=06196B45DC4479E7!474&ithint=onenote&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05&migratedtospo=true&wdo=2&cid=06196b45dc4479e7 HTTP/1.1 Host: onedrive.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: E=P:62XqVXL33Ig=:VqvC1jqIACslm1EiZmC/w1L0JzuVT0Ci0sfYTRn7CXc=:F; xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; xidseq=1
2024-10-28 17:02:42 UTC	798	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 49291 Content-Type: text/html; charset=utf-8 Expires: -1 Set-Cookie: E=P:HfF4VnL33Ig=:2JsJZpPfsGhZX96s5EPeMxT0dJfy7Bg0GCDdwFFH7c0=:F; domain=.live.com; path=/ Set-Cookie: xidseq=2; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Mon, 28-Oct-2024 15:22:42 GMT; path=/ Set-Cookie: wla42=; domain=live.com; expires=Mon, 04-Nov-2024 17:02:42 GMT; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 7dc88597df-45lmn X-ODWebServer: namsouthce155880-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B43B09C8762A483898E9F69E5ADEAD68 Ref B: SN1EDGE1520 Ref C: 2024-10-28T17:02:42Z Date: Mon, 28 Oct 2024 17:02:42 GMT Connection: close
2024-10-28 17:02:42 UTC	3629	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 20 20 73 64 78 5f 68 74 6d 6c 22 20 73 74 79 6c 65 3d 22 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 26 23 35 39 3b 63 68 61 72 73 65 74 26 23 36 31 3b 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 74 61 70 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" class=" responsive sdx_html" style=""> <head> <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><meta name="msapplication-tap
2024-10-28 17:02:43 UTC	8192	IN	Data Raw: 72 79 7b 53 74 72 69 6e 67 28 6e 28 29 29 2c 73 3d 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 7d 76 61 72 20 68 2c 6d 3d 28 68 3d 63 28 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 72 2c 6e 3d 30 3b 68 5b 65 2b 28 6e 7c 7c 22 22 29 5d 3b 29 2b 2b 6e 3b 72 65 74 75 72 6e 20 68 5b 65 2b 3d 6e 7c 7c 22 22 5d 3d 21 30 2c 6c 28 70 2c 74 3d 22 40 40 22 2b 65 2c 61 2e 67 73 28 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 7c 7c 28 72 3d 21 30 2c 6c 28 74 68 69 73 2c 74 2c 61 28 65 29 29 2c 72 3d 21 31 29 7d 29 29 2c 74 7d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 Data Ascii: ry{String(n()),s=!0}catch(e){}}var h,m=(h=c(null),function(e){for(var t,r,n=0;h[e+(n\|\|"")];)++n;return h[e+=n\|\|""]=!0,l(p,t="@@"+e,a.gs(null,function(e){r\|\|(r=!0,l(this,t,a(e)),r=!1)})),t});o=function(e){if(this instanceof o)throw new TypeError("Symbol is
2024-10-28 17:02:43 UTC	3911	IN	Data Raw: 5b 53 5d 3d 65 2c 54 5b 53 2b 31 5d 3d 74 2c 32 3d 3d 3d 28 53 2b 3d 32 29 26 26 28 45 3f 45 28 72 29 3a 41 28 29 29 7d 2c 4f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 2c 6a 3d 4f 7c 7c 7b 7d 2c 4d 3d 6a 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 6a 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 6b 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 26 26 22 5b 6f 62 6a 65 63 74 20 70 72 6f 63 65 73 73 5d 22 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 70 72 6f 63 65 73 73 29 2c 50 3d 22 75 6e 64 65 66 69 6e 65 64 Data Ascii: [S]=e,T[S+1]=t,2===(S+=2)&&(E?E(r):A())},O="undefined"!=typeof window?window:void 0,j=O\|\|{},M=j.MutationObserver\|\|j.WebKitMutationObserver,k="undefined"==typeof self&&"undefined"!=typeof process&&"[object process]"==={}.toString.call(process),P="undefined
2024-10-28 17:02:43 UTC	8192	IN	Data Raw: 71 75 69 72 65 52 65 67 45 78 70 3d 2f 5b 5e 2e 5d 5c 73 2a 72 65 71 75 69 72 65 5c 73 2a 5c 28 5c 73 2a 5b 22 27 5d 28 5b 5e 27 22 5c 73 5d 2b 29 5b 22 27 5d 5c 73 2a 5c 29 2f 67 2c 6a 73 53 75 66 66 69 78 52 65 67 45 78 70 3d 2f 5c 2e 6a 73 24 2f 2c 63 75 72 72 44 69 72 52 65 67 45 78 70 3d 2f 5e 5c 2e 5c 2f 2f 2c 6f 70 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 73 74 72 69 6e 67 3d 6f 70 2e 74 6f 53 74 72 69 6e 67 2c 68 61 73 4f 77 6e 3d 6f 70 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 69 73 42 72 6f 77 73 65 72 3d 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 7c 7c 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d Data Ascii: quireRegExp=/[^.]\srequire\s$\s["']([^'"\s]+)["']\s$/g,jsSuffixRegExp=/\.js$/,currDirRegExp=/^\.\//,op=Object.prototype,ostring=op.toString,hasOwn=op.hasOwnProperty,isBrowser=!("undefined"==typeof window\|\|"undefined"==typeof navigator\|\|!window.docum
2024-10-28 17:02:43 UTC	8192	IN	Data Raw: 72 65 74 75 72 6e 20 6a 28 65 29 7d 75 26 26 65 61 63 68 28 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 20 69 28 6f 2c 73 2c 61 29 7b 76 61 72 20 65 3d 6f 2e 6d 61 70 2e 69 64 3b 69 66 28 6f 2e 65 72 72 6f 72 29 6f 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 6f 2e 65 72 72 6f 72 29 3b 65 6c 73 65 7b 73 5b 65 5d 3d 21 30 3b 65 61 63 68 28 6f 2e 64 65 70 4d 61 70 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 69 64 2c 6e 3d 67 65 74 4f 77 6e 28 6c 2c 72 29 3b 69 66 28 6e 26 26 21 6f 2e 64 65 70 4d 61 74 63 68 65 64 5b 74 5d 26 26 21 61 5b 72 5d 29 69 66 28 67 65 74 4f 77 6e 28 73 2c 72 29 29 7b 6f 2e 64 65 66 69 6e 65 44 65 70 28 74 2c 6d 5b 72 5d 29 3b 6f 2e 63 68 65 63 6b 28 29 7d 65 6c 73 65 20 69 28 6e 2c Data Ascii: return j(e)}u&&each(s,function(e){!function i(o,s,a){var e=o.map.id;if(o.error)o.emit("error",o.error);else{s[e]=!0;each(o.depMaps,function(e,t){var r=e.id,n=getOwn(l,r);if(n&&!o.depMatched[t]&&!a[r])if(getOwn(s,r)){o.defineDep(t,m[r]);o.check()}else i(n,
2024-10-28 17:02:43 UTC	8192	IN	Data Raw: 30 2c 6f 29 2e 6a 6f 69 6e 28 22 2f 22 29 29 29 7b 69 73 41 72 72 61 79 28 61 29 26 26 28 61 3d 61 5b 30 5d 29 3b 69 2e 73 70 6c 69 63 65 28 30 2c 6f 2c 61 29 3b 62 72 65 61 6b 7d 73 3d 69 2e 6a 6f 69 6e 28 22 2f 22 29 3b 73 3d 28 22 2f 22 3d 3d 3d 28 73 2b 3d 74 7c 7c 28 2f 5e 64 61 74 61 5c 3a 7c 5e 62 6c 6f 62 5c 3a 7c 5c 3f 2f 2e 74 65 73 74 28 73 29 7c 7c 72 3f 22 22 3a 22 2e 6a 73 22 29 29 2e 63 68 61 72 41 74 28 30 29 7c 7c 73 2e 6d 61 74 63 68 28 2f 5e 5b 5c 77 5c 2b 5c 2e 5c 2d 5d 2b 3a 2f 29 3f 22 22 3a 67 2e 62 61 73 65 55 72 6c 29 2b 73 7d 72 65 74 75 72 6e 20 67 2e 75 72 6c 41 72 67 73 26 26 21 2f 5e 62 6c 6f 62 5c 3a 2f 2e 74 65 73 74 28 73 29 3f 73 2b 67 2e 75 72 6c 41 72 67 73 28 65 2c 73 29 3a 73 7d 2c 6c 6f 61 64 3a 66 75 6e 63 74 69 6f Data Ascii: 0,o).join("/"))){isArray(a)&&(a=a[0]);i.splice(0,o,a);break}s=i.join("/");s=("/"===(s+=t\|\|(/^data\:\|^blob\:\|\?/.test(s)\|\|r?"":".js")).charAt(0)\|\|s.match(/^[\w\+\.\-]+:/)?"":g.baseUrl)+s}return g.urlArgs&&!/^blob\:/.test(s)?s+g.urlArgs(e,s):s},load:functio
2024-10-28 17:02:43 UTC	8192	IN	Data Raw: 72 73 5c 75 30 30 32 66 63 6c 69 65 6e 74 73 74 72 69 6e 67 2e 6d 76 63 5c 75 30 30 33 66 6d 6b 74 5c 75 30 30 33 64 65 6e 2d 55 53 5c 75 30 30 32 36 67 72 6f 75 70 5c 75 30 30 33 64 50 61 72 61 74 75 72 65 5c 75 30 30 32 36 76 5c 75 30 30 33 64 31 39 2e 31 34 34 35 2e 30 36 31 37 2e 33 30 31 36 5c 75 30 30 32 36 75 73 65 52 65 71 75 69 72 65 73 4a 73 5c 75 30 30 33 64 46 61 6c 73 65 22 2c 22 75 73 69 6e 67 4d 61 6e 69 66 65 73 74 22 3a 31 7d 3b 76 61 72 20 5f 5f 6f 64 73 70 5f 63 64 6e 43 6f 6e 66 69 67 3d 7b 22 62 61 73 65 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 5c 75 30 30 33 61 5c 75 30 30 32 66 5c 75 30 30 32 66 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 5c 75 30 30 32 66 66 69 6c 65 73 5c 75 30 30 32 66 6f 64 73 70 2d 77 65 62 2d 70 Data Ascii: rs\u002fclientstring.mvc\u003fmkt\u003den-US\u0026group\u003dParature\u0026v\u003d19.1445.0617.3016\u0026useRequiresJs\u003dFalse","usingManifest":1};var __odsp_cdnConfig={"baseUrls":["https\u003a\u002f\u002fres-1.cdn.office.net\u002ffiles\u002fodsp-web-p
2024-10-28 17:02:43 UTC	791	IN	Data Raw: 77 6c 68 6f 73 74 77 65 62 70 61 63 6b 22 5d 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 68 69 6d 3a 20 7b 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 70 73 3a 20 24 43 6f 6e 66 69 67 2e 72 65 71 75 69 72 65 4a 73 44 65 70 73 41 72 72 61 79 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 64 64 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 74 61 67 20 73 6f 20 73 63 72 69 70 74 20 69 73 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 6f 20 73 65 72 76 69 63 65 20 77 6f 72 6b 65 72 20 61 6e 64 20 63 61 6e 20 74 68 65 6e 20 62 65 20 63 61 63 68 65 64 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 6e 4e 6f 64 65 43 72 Data Ascii: wlhostwebpack"]}, shim: {}, deps: $Config.requireJsDepsArray, // Add crossorigin="anonymous" tag so script is transparent to service worker and can then be cached onNodeCr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 17:02:45 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=157923 Date: Mon, 28 Oct 2024 17:02:45 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 17:02:46 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=157976 Date: Mon, 28 Oct 2024 17:02:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-28 17:02:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49753	13.107.136.10	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:48 UTC	517	OUT	OPTIONS /v1.0/token HTTP/1.1 Host: api-badgerp.svc.ms Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://onedrive.live.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:02:48 UTC	549	IN	HTTP/1.1 200 OK Allow: OPTIONS, TRACE, GET, HEAD, POST Public: OPTIONS, TRACE, GET, HEAD, POST X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: appid,cache-control,canary,content-type,x-forcecache,authorization Access-Control-Allow-Methods: GET, POST, OPTIONS X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FFBC4391F1B54B80A6C84B122CFBA7D0 Ref B: DFW311000104017 Ref C: 2024-10-28T17:02:48Z Date: Mon, 28 Oct 2024 17:02:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	13.107.136.10	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:49 UTC	613	OUT	POST /v1.0/token HTTP/1.1 Host: api-badgerp.svc.ms Connection: keep-alive Content-Length: 48 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:02:49 UTC	48	OUT	Data Raw: 7b 22 61 70 70 69 64 22 3a 22 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 34 38 31 37 31 30 61 34 22 7d Data Ascii: {"appid":"00000000-0000-0000-0000-0000481710a4"}
2024-10-28 17:02:49 UTC	602	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 982 Content-Type: application/json; charset=utf-8 Expires: -1 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: appid,cache-control,canary,content-type,x-forcecache,authorization Access-Control-Allow-Methods: GET, POST, OPTIONS X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: BD40132500C2421AA9AF8769E2F1110D Ref B: DFW311000108017 Ref C: 2024-10-28T17:02:49Z Date: Mon, 28 Oct 2024 17:02:48 GMT Connection: close
2024-10-28 17:02:49 UTC	982	IN	Data Raw: 7b 22 61 75 74 68 53 63 68 65 6d 65 22 3a 22 62 61 64 67 65 72 22 2c 22 74 6f 6b 65 6e 22 3a 22 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 49 73 49 6d 74 70 5a 43 49 36 49 6b 51 33 4d 6a 6c 42 52 44 6c 46 51 6a 5a 46 4e 54 52 43 4d 6a 63 78 4d 6b 55 78 4e 6a 55 77 52 6b 49 7a 51 30 51 30 51 7a 6b 33 51 30 4a 46 4f 45 4a 42 4d 54 63 69 4c 43 4a 34 4e 58 51 69 4f 69 49 78 65 57 31 30 62 6e 4a 69 62 46 4e 35 59 31 4d 30 56 31 56 51 63 7a 67 78 54 57 77 34 64 6d 39 31 61 47 4d 69 4c 43 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 66 51 2e 65 79 4a 68 64 57 51 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 39 75 5a 57 52 79 61 58 5a 6c 4c 6d 4e 76 62 53 38 69 4c 43 4a 70 63 33 4d 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 4a 68 5a 47 64 6c 63 69 35 7a Data Ascii: {"authScheme":"badger","token":"eyJhbGciOiJSUzI1NiIsImtpZCI6IkQ3MjlBRDlFQjZFNTRCMjcxMkUxNjUwRkIzQ0Q0Qzk3Q0JFOEJBMTciLCJ4NXQiOiIxeW10bnJibFN5Y1M0V1VQczgxTWw4dm91aGMiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49758	13.107.136.10	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:50 UTC	352	OUT	GET /v1.0/token HTTP/1.1 Host: api-badgerp.svc.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:02:50 UTC	630	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache Pragma: no-cache Allow: POST Content-Length: 72 Content-Type: application/json; charset=utf-8 Expires: -1 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: appid,cache-control,canary,content-type,x-forcecache,authorization Access-Control-Allow-Methods: GET, POST, OPTIONS X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 76ABF22F958D43D189B9230D037A99C3 Ref B: DFW311000108011 Ref C: 2024-10-28T17:02:50Z Date: Mon, 28 Oct 2024 17:02:50 GMT Connection: close
2024-10-28 17:02:50 UTC	72	IN	Data Raw: 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d Data Ascii: {"Message":"The requested resource does not support http method 'GET'."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49757	13.107.137.11	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:50 UTC	832	OUT	OPTIONS /_api/v2.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05/driveItem?action=Edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault HTTP/1.1 Host: my.microsoftpersonalcontent.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,prefer Origin: https://onedrive.live.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:02:50 UTC	2776	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,20253,0,84790,30 Access-Control-Allow-Origin: * Access-Control-Max-Age: 2592000 Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Type, Content-Version, CTag, ETag, Location, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After, spclientservicerequestduration, SPRequestDuration, SPRequestGuid, Timing-Allow-Origin, Transfer-Encoding, WWW-Authenticate, X-Fluid-Epoch, X-Fluid-Retries, X-Fluid-SLTelemetry, X-Fluid-Telemetry, X-MoveState, x-ms-diagnostics, Reauthid, X-Cache-Origin, X-MSEdge-Ref, X-ErrorCode, X-Errorsource, X-Errortype Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, TRACE, CONNECT, PATCH, MERGE Access-Control-Allow-Headers: authorization,prefer X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 16645ea1-8098-6000-a922-a0c736b344c1 request-id: 16645ea1-8098-6000-a922-a0c736b344c1 MS-CV: oV5kFpiAAGCpIqDHNrNEwQ.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-SN1r5e&frontEnd=AFD&RemoteIP=155.94.241.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 58 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25409 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0EE05731D7C349D2B675FF18232E7329 Ref B: SN1EDGE2208 Ref C: 2024-10-28T17:02:50Z Date: Mon, 28 Oct 2024 17:02:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49760	13.107.137.11	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:52 UTC	1845	OUT	POST /_api/v2.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05/driveItem?action=Edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault HTTP/1.1 Host: my.microsoftpersonalcontent.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Prefer: autoredeem sec-ch-ua-mobile: ?0 Authorization: Badger eyJhbGciOiJSUzI1NiIsImtpZCI6IkQ3MjlBRDlFQjZFNTRCMjcxMkUxNjUwRkIzQ0Q0Qzk3Q0JFOEJBMTciLCJ4NXQiOiIxeW10bnJibFN5Y1M0V1VQczgxTWw4dm91aGMiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzMwNzM5NzY5LCJuYmYiOjE3MzAxMzQ5NjksImdpdmVuX25hbWUiOiI3MSIsImZhbWlseV9uYW1lIjoiUGFycm90IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTlkODNmYTcyODBlODA2MjJlODcxMmZiNjljNjY2MjYiLCJhcHBpZCI6IjAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDA0ODE3MTBhNCIsImlhdCI6MTczMDEzNDk2OX0.i-5BVxWXbHWXym_MsrDA0ByVJ1Rl8K1R3i36VdK_Q4NjcXX6ZE1cSb7RsgxliBoR4q58qikPLPFFogzp_0upLGtDYlalH7cv6QsuhlX7-AiCSc3kZdRlA4UifCYgnv_YqtCXTGXmdptH_OIL1udyGWdAHrDZlrDaF9kYuQs-V1OAHY6lELVw59izfsV9JXKydCqdILPNMZP9JFips4VbqF_IyU9eBTMTMKQ4-p_vLHulItIY9YxcT1K24__BeDFFsh3NxZRTSOqnlU174JH9tI6tXqGifWpfmHUTxi_6G_pYUkM2S-QrpuLTRrLGYwkAqmY1WgJE0bDJcvzYYT_1AA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:02:52 UTC	2771	IN	HTTP/1.1 403 Forbidden Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: application/json;odata.metadata=minimal;odata.streaming=true;IEEE754Compatible=false;charset=utf-8 Expires: -1 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,8277,0,49702,50 Access-Control-Allow-Origin: * Access-Control-Max-Age: 2592000 Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Type, Content-Version, CTag, ETag, Location, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After, spclientservicerequestduration, SPRequestDuration, SPRequestGuid, Timing-Allow-Origin, Transfer-Encoding, WWW-Authenticate, X-Fluid-Epoch, X-Fluid-Retries, X-Fluid-SLTelemetry, X-Fluid-Telemetry, X-MoveState, x-ms-diagnostics, Reauthid, X-Cache-Origin, X-MSEdge-Ref, X-ErrorCode, X-Errorsource, X-Errortype X-SharePointHealthScore: 1 X-SP-SERVERSTATE: ReadOnly=0 ODATA-VERSION: 4.0 SPClientServiceRequestDuration: 16 SPRequestDuration: 17 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 17645ea1-100f-6000-c3ae-5b511492c285 request-id: 17645ea1-100f-6000-c3ae-5b511492c285 MS-CV: oV5kFw8QAGDDrltRFJLChQ.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=9188040d-6c67-4c5b-b112-36a304b66dad&destinationEndpoint=Edge-Prod-SN1r5a&frontEnd=AFD&RemoteIP=155.94.241.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25409 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C34251555CE04B178590CE49A8C93864 Ref B: SN1EDGE2008 Ref C: 2024-10-28T17:02:52Z Date: Mon, 28 Oct 2024 17:02:51 GMT Connection: close
2024-10-28 17:02:52 UTC	130	IN	Data Raw: 37 63 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 22 61 63 63 65 73 73 44 65 6e 69 65 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 73 68 61 72 69 6e 67 20 6c 69 6e 6b 20 6e 6f 20 6c 6f 6e 67 65 72 20 65 78 69 73 74 73 2c 20 6f 72 20 79 6f 75 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 69 74 2e 22 7d 7d 0d 0a Data Ascii: 7c{"error":{"code":"accessDenied","message":"The sharing link no longer exists, or you do not have permission to access it."}}
2024-10-28 17:02:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49765	13.107.137.11	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:53 UTC	758	OUT	OPTIONS /_api/v2.0/drives/06196B45DC4479E7/items/06196B45DC4479E7!474?action=edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault HTTP/1.1 Host: my.microsoftpersonalcontent.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,prefer Origin: https://onedrive.live.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:02:54 UTC	2779	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" WWW-Authenticate: Wlid1.1 realm="WindowsLive", fault="BadContextToken", policy="MBI_SSL", ver="7.5.0.0", target="ssl.live.com", siteId="ssl.live.com" X-NetworkStatistics: 0,525568,0,0,243,0,26332,110 Access-Control-Allow-Origin: * Access-Control-Max-Age: 2592000 Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Type, Content-Version, CTag, ETag, Location, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After, spclientservicerequestduration, SPRequestDuration, SPRequestGuid, Timing-Allow-Origin, Transfer-Encoding, WWW-Authenticate, X-Fluid-Epoch, X-Fluid-Retries, X-Fluid-SLTelemetry, X-Fluid-Telemetry, X-MoveState, x-ms-diagnostics, Reauthid, X-Cache-Origin, X-MSEdge-Ref, X-ErrorCode, X-Errorsource, X-Errortype Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, TRACE, CONNECT, PATCH, MERGE Access-Control-Allow-Headers: authorization,prefer X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 17645ea1-9070-a000-2465-164bc22ecfed request-id: 17645ea1-9070-a000-2465-164bc22ecfed MS-CV: oV5kF3CQAKAkZRZLwi7P7Q.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-SN1r5e&frontEnd=AFD&RemoteIP=155.94.241.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 98 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25409 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 594A8B2E5F09449981561AE6EB1D42EC Ref B: SN1EDGE2319 Ref C: 2024-10-28T17:02:53Z Date: Mon, 28 Oct 2024 17:02:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49770	13.107.137.11	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:55 UTC	1777	OUT	GET /_api/v2.0/drives/06196B45DC4479E7/items/06196B45DC4479E7!474?action=edit&$select=id,openWith,officebundle,currentUserRole,eTag,name,size,content.downloadUrl,file,sharepointIds,sensitivityLabel,webUrl,webDavUrl,parentReference,vault HTTP/1.1 Host: my.microsoftpersonalcontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Prefer: Include-Feature=AddToOneDrive;Vault sec-ch-ua-mobile: ?0 Authorization: Badger eyJhbGciOiJSUzI1NiIsImtpZCI6IkQ3MjlBRDlFQjZFNTRCMjcxMkUxNjUwRkIzQ0Q0Qzk3Q0JFOEJBMTciLCJ4NXQiOiIxeW10bnJibFN5Y1M0V1VQczgxTWw4dm91aGMiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovL29uZWRyaXZlLmNvbS8iLCJpc3MiOiJodHRwczovL2JhZGdlci5zdmMubXMvdjEuMC9hdXRoIiwiZXhwIjoxNzMwNzM5NzY5LCJuYmYiOjE3MzAxMzQ5NjksImdpdmVuX25hbWUiOiI3MSIsImZhbWlseV9uYW1lIjoiUGFycm90IiwiaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc2lkIjoiYTlkODNmYTcyODBlODA2MjJlODcxMmZiNjljNjY2MjYiLCJhcHBpZCI6IjAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDA0ODE3MTBhNCIsImlhdCI6MTczMDEzNDk2OX0.i-5BVxWXbHWXym_MsrDA0ByVJ1Rl8K1R3i36VdK_Q4NjcXX6ZE1cSb7RsgxliBoR4q58qikPLPFFogzp_0upLGtDYlalH7cv6QsuhlX7-AiCSc3kZdRlA4UifCYgnv_YqtCXTGXmdptH_OIL1udyGWdAHrDZlrDaF9kYuQs-V1OAHY6lELVw59izfsV9JXKydCqdILPNMZP9JFips4VbqF_IyU9eBTMTMKQ4-p_vLHulItIY9YxcT1K24__BeDFFsh3NxZRTSOqnlU174JH9tI6tXqGifWpfmHUTxi_6G_pYUkM2S-QrpuLTRrLGYwkAqmY1WgJE0bDJcvzYYT_1AA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:02:55 UTC	2707	IN	HTTP/1.1 403 Forbidden Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: application/json;charset=utf-8 Expires: -1 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,233,0,26332,106 Access-Control-Allow-Origin: * Access-Control-Max-Age: 2592000 Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Type, Content-Version, CTag, ETag, Location, RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After, spclientservicerequestduration, SPRequestDuration, SPRequestGuid, Timing-Allow-Origin, Transfer-Encoding, WWW-Authenticate, X-Fluid-Epoch, X-Fluid-Retries, X-Fluid-SLTelemetry, X-Fluid-Telemetry, X-MoveState, x-ms-diagnostics, Reauthid, X-Cache-Origin, X-MSEdge-Ref, X-ErrorCode, X-Errorsource, X-Errortype X-SharePointHealthScore: 2 X-SP-SERVERSTATE: ReadOnly=0 ODATA-VERSION: 4.0 SPClientServiceRequestDuration: 34 SPRequestDuration: 34 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 17645ea1-30c9-a000-2465-120b79b29b9d request-id: 17645ea1-30c9-a000-2465-120b79b29b9d MS-CV: oV5kF8kwAKAkZRILebKbnQ.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=9188040d-6c67-4c5b-b112-36a304b66dad&destinationEndpoint=Edge-Prod-SN1r5a&frontEnd=AFD&RemoteIP=155.94.241.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25409 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 194CB13701554D85935EDDDEEEAA9631 Ref B: SN1EDGE2010 Ref C: 2024-10-28T17:02:55Z Date: Mon, 28 Oct 2024 17:02:55 GMT Connection: close
2024-10-28 17:02:55 UTC	65	IN	Data Raw: 33 62 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 22 61 63 63 65 73 73 44 65 6e 69 65 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 63 63 65 73 73 20 64 65 6e 69 65 64 22 7d 7d 0d 0a Data Ascii: 3b{"error":{"code":"accessDenied","message":"Access denied"}}
2024-10-28 17:02:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49775	13.107.137.11	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:56 UTC	1322	OUT	GET /error.html HTTP/1.1 Host: onedrive.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://onedrive.live.com/edit?id=06196B45DC4479E7!474&resid=06196B45DC4479E7!474&ithint=onenote&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vcyFCT2Q1Uk54RmF4a0dnMXI1YmMzMGJnUVdta05jP2U9SjY3cXhLLUtmRXVycXBNazBkYXNUdyZhdD05&migratedtospo=true&wdo=2&cid=06196b45dc4479e7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; E=P:HfF4VnL33Ig=:2JsJZpPfsGhZX96s5EPeMxT0dJfy7Bg0GCDdwFFH7c0=:F; xidseq=2; wla42=; MicrosoftApplicationsTelemetryDeviceId=1a7f5863-c448-40da-86e0-289f951f961f; ai_session=uE9OGgpaV/nrr1mAdEyp/g\|1730134968491\|1730134968491; MSFPC=GUID=c60a864d5fb6486f8d20ee0df16f5645&HASH=c60a&LV=202410&V=4&LU=1730134974401
2024-10-28 17:02:56 UTC	661	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 1109 Content-Type: text/html Expires: -1 Last-Modified: Tue, 24 Sep 2024 17:32:48 GMT Accept-Ranges: bytes ETag: "0e0e4c5a7edb1:0" Set-Cookie: E=P:1364XnL33Ig=:5QrreAH5G0PDRUdo8U6WCO6XWF4w4wgX+zTLGtR8gHk=:F; domain=.live.com; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 7dc88597df-nwnsr X-ODWebServer: namsouthce155880-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F93C43CB152B4ACEA90F5B4D8A3C2CB0 Ref B: SN1EDGE1317 Ref C: 2024-10-28T17:02:56Z Date: Mon, 28 Oct 2024 17:02:56 GMT Connection: close
2024-10-28 17:02:56 UTC	1109	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 4d 69 63 72 6f 73 6f 66 74 20 4f 6e 65 44 72 69 76 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 38 38 25 3b 0d 0a 20 20 Data Ascii: <!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> <title>Microsoft OneDrive</title> <style type="text/css"> body { font-family:"Segoe UI", arial, sans-serif; font-size:88%;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49774	13.107.137.11	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:57 UTC	980	OUT	GET /favicon.ico HTTP/1.1 Host: onedrive.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onedrive.live.com/error.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; xidseq=2; wla42=; MicrosoftApplicationsTelemetryDeviceId=1a7f5863-c448-40da-86e0-289f951f961f; MSFPC=GUID=c60a864d5fb6486f8d20ee0df16f5645&HASH=c60a&LV=202410&V=4&LU=1730134974401; ai_session=uE9OGgpaV/nrr1mAdEyp/g\|1730134968491\|1730134974902; E=P:1364XnL33Ig=:5QrreAH5G0PDRUdo8U6WCO6XWF4w4wgX+zTLGtR8gHk=:F
2024-10-28 17:02:57 UTC	664	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 7886 Content-Type: image/x-icon Expires: -1 Last-Modified: Tue, 24 Sep 2024 17:33:02 GMT Accept-Ranges: bytes ETag: "01b3dcea7edb1:0" Set-Cookie: E=P:kgc7X3L33Ig=:3CEd/hZxiyXKMs9dQp1R2YYp7XsC06/+kc8XBunj5Js=:F; domain=.live.com; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 7dc88597df-9ptq6 X-ODWebServer: namsouthce155880-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D8B1E736D27C44E7ACCC82E31D7ABFF1 Ref B: SN1EDGE1920 Ref C: 2024-10-28T17:02:57Z Date: Mon, 28 Oct 2024 17:02:56 GMT Connection: close
2024-10-28 17:02:57 UTC	2371	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @
2024-10-28 17:02:57 UTC	5515	IN	Data Raw: 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 cf df 90 14 10 00 00 00 00 00 00 00 00 d4 78 00 cf d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d2 77 00 ff c4 6d 02 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff ba 67 04 ff c9 77 0a ff da 8b 12 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 df df 90 14 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 78 00 20 d4 78 00 ef d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff ca 71 01 ff ba 65 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff Data Ascii: xxxxxxxxxxxxxxwmddddgwx xxxxxxxxxxxxqeddddddddd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49782	13.107.139.11	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:02:58 UTC	732	OUT	GET /favicon.ico HTTP/1.1 Host: onedrive.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; xidseq=2; wla42=; MicrosoftApplicationsTelemetryDeviceId=1a7f5863-c448-40da-86e0-289f951f961f; MSFPC=GUID=c60a864d5fb6486f8d20ee0df16f5645&HASH=c60a&LV=202410&V=4&LU=1730134974401; ai_session=uE9OGgpaV/nrr1mAdEyp/g\|1730134968491\|1730134974902; E=P:kgc7X3L33Ig=:3CEd/hZxiyXKMs9dQp1R2YYp7XsC06/+kc8XBunj5Js=:F
2024-10-28 17:02:58 UTC	664	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 7886 Content-Type: image/x-icon Expires: -1 Last-Modified: Tue, 24 Sep 2024 17:33:02 GMT Accept-Ranges: bytes ETag: "01b3dcea7edb1:0" Set-Cookie: E=P:AxnSX3L33Ig=:YM8j56mJteJ5O5JerX/OmnRMJq9jhPSdIAHQLYBbDM8=:F; domain=.live.com; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 7dc88597df-dznq6 X-ODWebServer: namsouthce155880-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DA84B54B138A4DCB8904FEC141652650 Ref B: SN1EDGE1310 Ref C: 2024-10-28T17:02:58Z Date: Mon, 28 Oct 2024 17:02:57 GMT Connection: close
2024-10-28 17:02:58 UTC	2327	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @
2024-10-28 17:02:58 UTC	5559	IN	Data Raw: 78 00 ff d4 78 00 ff d4 78 00 ff cf 74 01 ff bf 69 02 ff bf 6c 06 ff d0 80 0e ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 cf df 90 14 10 00 00 00 00 00 00 00 00 d4 78 00 cf d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d2 77 00 ff c4 6d 02 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff ba 67 04 ff c9 77 0a ff da 8b 12 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 df df 90 14 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 78 00 20 d4 78 00 ef d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff Data Ascii: xxxtilxxxxxxxxxxxxxxwmddddgwx xxxxxxxxxxxx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49785	152.199.21.175	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:15 UTC	604	OUT	GET /16.000/content/js/Logout_Core_BN_5ext0CSrr58V8ZQYCVw2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:03:15 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2099077 Cache-Control: public, max-age=31536000 Content-MD5: 7UKAS/X5nXz4ZajjhJT4sA== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 17:03:15 GMT Etag: 0x8DCE2A1DB62A77D Last-Modified: Wed, 02 Oct 2024 05:19:57 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c074f86-a01e-0028-0843-16e0cf000000 x-ms-version: 2009-09-19 Content-Length: 40671 Connection: close
2024-10-28 17:03:16 UTC	16383	IN	Data Raw: 76 61 72 20 24 47 3d 7b 5f 72 58 3a 22 31 31 33 22 2c 5f 6f 71 3a 22 31 32 37 22 2c 5f 6f 55 3a 22 35 30 22 2c 5f 6f 75 3a 22 34 22 2c 54 72 75 73 74 65 64 50 43 4e 61 6d 65 4d 61 78 4c 65 6e 67 74 68 53 74 72 69 6e 67 3a 22 36 33 22 2c 5f 70 38 3a 22 37 22 2c 24 61 4a 3a 22 38 22 2c 53 41 4f 54 43 4d 61 78 41 63 63 65 70 74 65 64 4c 65 6e 67 74 68 53 74 72 69 6e 67 3a 22 31 30 22 2c 55 73 65 44 69 66 66 65 72 65 6e 74 4f 70 74 69 6f 6e 56 61 6c 75 65 3a 22 55 73 65 44 69 66 66 65 72 65 6e 74 22 2c 5f 72 79 3a 22 75 73 65 72 6e 61 6d 65 22 2c 5f 6f 72 3a 22 70 63 65 78 70 22 2c 58 62 6f 78 51 53 3a 22 78 62 78 22 2c 5f 6d 37 3a 22 6d 6b 74 22 2c 5f 6c 55 3a 22 6c 63 22 2c 53 69 74 65 49 64 51 53 3a 22 69 64 22 7d 2c 24 74 3d 7b 5f 65 70 3a 30 2c 5f 6c 42 Data Ascii: var $G={_rX:"113",_oq:"127",_oU:"50",_ou:"4",TrustedPCNameMaxLengthString:"63",_p8:"7",$aJ:"8",SAOTCMaxAcceptedLengthString:"10",UseDifferentOptionValue:"UseDifferent",_ry:"username",_or:"pcexp",XboxQS:"xbx",_m7:"mkt",_lU:"lc",SiteIdQS:"id"},$t={_ep:0,_lB
2024-10-28 17:03:16 UTC	16383	IN	Data Raw: 24 4c 2e 67 65 74 28 61 29 29 7d 29 7d 2c 5f 63 77 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 24 4a 2e 5f 6c 46 28 62 29 26 26 5f 46 28 61 29 26 26 24 4c 2e 61 64 64 28 62 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 24 4c 2e 5f 65 4f 28 24 4c 2e 67 65 74 28 61 29 29 7d 29 7d 2c 5f 63 4c 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 5f 68 58 28 61 29 26 26 5f 46 28 62 29 29 7b 76 61 72 20 63 3d 6e 65 77 20 24 4c 2e 5f 41 52 28 62 29 3b 61 5b 63 2e 74 79 70 65 5d 3d 63 7d 7d 2c 5f 6a 4f 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 61 29 7b 76 61 72 20 64 3d 6e 75 6c 6c 3b 69 66 28 5f 68 58 28 61 29 26 26 5f 46 28 63 29 29 7b 76 61 72 20 62 3d 24 4c 2e 5f 6e 45 2b 63 3b 69 66 28 5f 68 58 28 61 5b 62 5d 29 26 26 61 5b 62 5d 2e 5f 63 75 73 74 6f 6d 45 76 65 Data Ascii: $L.get(a))})},_cw:function(b,a){$J._lF(b)&&_F(a)&&$L.add(b,a,function(a){$L._eO($L.get(a))})},_cL:function(b,a){if(_hX(a)&&_F(b)){var c=new $L._AR(b);a[c.type]=c}},_jO:function(c,a){var d=null;if(_hX(a)&&_F(c)){var b=$L._nE+c;if(_hX(a[b])&&a[b]._customEve
2024-10-28 17:03:16 UTC	7905	IN	Data Raw: 65 6e 67 74 68 2d 32 29 29 3b 72 65 74 75 72 6e 20 62 2b 61 2e 6a 6f 69 6e 28 22 2e 22 29 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 62 2b 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 7d 7d 3b 24 48 2e 24 41 67 3d 7b 5f 6b 37 3a 32 39 36 38 2c 22 67 65 74 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 48 2e 5f 6a 57 28 24 48 2e 24 67 2e 5f 72 38 29 7d 2c 22 73 65 74 22 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 24 48 2e 77 72 69 74 65 28 24 48 2e 24 67 2e 5f 72 38 2c 24 48 2e 5f 6d 36 28 62 29 2c 74 72 75 65 2c 24 48 2e 5f 6a 71 28 74 72 75 65 2c 61 29 29 7d 2c 5f 67 74 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 62 29 7b 74 72 79 7b 76 61 72 20 61 3d 6e 65 77 20 44 61 74 65 2d 63 3b 24 48 2e 24 41 67 2e 73 65 74 28 7b 74 68 72 6f 75 67 68 70 75 74 Data Ascii: ength-2));return b+a.join(".")}else return b+document.domain}};$H.$Ag={_k7:2968,"get":function(){return $H._jW($H.$g._r8)},"set":function(b,a){$H.write($H.$g._r8,$H._m6(b),true,$H._jq(true,a))},_gt:function(c,b){try{var a=new Date-c;$H.$Ag.set({throughput

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49788	13.107.137.11	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:16 UTC	1067	OUT	GET /?lc=1033 HTTP/1.1 Host: onedrive.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=96c45132-9fc5-4f1d-a296-2feb99eceb71&&ODSP-ODWEB-ODCF&348; xidseq=2; wla42=; MicrosoftApplicationsTelemetryDeviceId=1a7f5863-c448-40da-86e0-289f951f961f; MSFPC=GUID=c60a864d5fb6486f8d20ee0df16f5645&HASH=c60a&LV=202410&V=4&LU=1730134974401; ai_session=uE9OGgpaV/nrr1mAdEyp/g\|1730134968491\|1730134974902; E=P:AxnSX3L33Ig=:YM8j56mJteJ5O5JerX/OmnRMJq9jhPSdIAHQLYBbDM8=:F
2024-10-28 17:03:17 UTC	2224	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 186 Content-Type: text/html; charset=utf-8 Location: https://www.microsoft.com/microsoft-365/onedrive/online-cloud-storage P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,90,0,26610,34 X-SharePointHealthScore: 0 Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 1d645ea1-d002-6000-cd2d-e873558c28dd request-id: 1d645ea1-d002-6000-cd2d-e873558c28dd MS-CV: oV5kHQLQAGDNLehzVYwo3Q.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-SN1r5a&frontEnd=AFD&RemoteIP=155.94.241.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 15 SPIisLatency: 4 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25409 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E5588BFEDC2D4778801366BD19806916 Ref B: SN1EDGE1409 Ref C: 2024-10-28T17:03:16Z Date: Mon, 28 Oct 2024 17:03:16 GMT Connection: close
2024-10-28 17:03:17 UTC	186	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2d 33 36 35 2f 6f 6e 65 64 72 69 76 65 2f 6f 6e 6c 69 6e 65 2d 63 6c 6f 75 64 2d 73 74 6f 72 61 67 65 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.microsoft.com/microsoft-365/onedrive/online-cloud-storage">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49790	152.199.21.175	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:17 UTC	401	OUT	GET /16.000/content/js/Logout_Core_BN_5ext0CSrr58V8ZQYCVw2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 17:03:17 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2099079 Cache-Control: public, max-age=31536000 Content-MD5: 7UKAS/X5nXz4ZajjhJT4sA== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 17:03:17 GMT Etag: 0x8DCE2A1DB62A77D Last-Modified: Wed, 02 Oct 2024 05:19:57 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c074f86-a01e-0028-0843-16e0cf000000 x-ms-version: 2009-09-19 Content-Length: 40671 Connection: close
2024-10-28 17:03:17 UTC	16383	IN	Data Raw: 76 61 72 20 24 47 3d 7b 5f 72 58 3a 22 31 31 33 22 2c 5f 6f 71 3a 22 31 32 37 22 2c 5f 6f 55 3a 22 35 30 22 2c 5f 6f 75 3a 22 34 22 2c 54 72 75 73 74 65 64 50 43 4e 61 6d 65 4d 61 78 4c 65 6e 67 74 68 53 74 72 69 6e 67 3a 22 36 33 22 2c 5f 70 38 3a 22 37 22 2c 24 61 4a 3a 22 38 22 2c 53 41 4f 54 43 4d 61 78 41 63 63 65 70 74 65 64 4c 65 6e 67 74 68 53 74 72 69 6e 67 3a 22 31 30 22 2c 55 73 65 44 69 66 66 65 72 65 6e 74 4f 70 74 69 6f 6e 56 61 6c 75 65 3a 22 55 73 65 44 69 66 66 65 72 65 6e 74 22 2c 5f 72 79 3a 22 75 73 65 72 6e 61 6d 65 22 2c 5f 6f 72 3a 22 70 63 65 78 70 22 2c 58 62 6f 78 51 53 3a 22 78 62 78 22 2c 5f 6d 37 3a 22 6d 6b 74 22 2c 5f 6c 55 3a 22 6c 63 22 2c 53 69 74 65 49 64 51 53 3a 22 69 64 22 7d 2c 24 74 3d 7b 5f 65 70 3a 30 2c 5f 6c 42 Data Ascii: var $G={_rX:"113",_oq:"127",_oU:"50",_ou:"4",TrustedPCNameMaxLengthString:"63",_p8:"7",$aJ:"8",SAOTCMaxAcceptedLengthString:"10",UseDifferentOptionValue:"UseDifferent",_ry:"username",_or:"pcexp",XboxQS:"xbx",_m7:"mkt",_lU:"lc",SiteIdQS:"id"},$t={_ep:0,_lB
2024-10-28 17:03:17 UTC	16383	IN	Data Raw: 24 4c 2e 67 65 74 28 61 29 29 7d 29 7d 2c 5f 63 77 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 24 4a 2e 5f 6c 46 28 62 29 26 26 5f 46 28 61 29 26 26 24 4c 2e 61 64 64 28 62 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 24 4c 2e 5f 65 4f 28 24 4c 2e 67 65 74 28 61 29 29 7d 29 7d 2c 5f 63 4c 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 5f 68 58 28 61 29 26 26 5f 46 28 62 29 29 7b 76 61 72 20 63 3d 6e 65 77 20 24 4c 2e 5f 41 52 28 62 29 3b 61 5b 63 2e 74 79 70 65 5d 3d 63 7d 7d 2c 5f 6a 4f 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 61 29 7b 76 61 72 20 64 3d 6e 75 6c 6c 3b 69 66 28 5f 68 58 28 61 29 26 26 5f 46 28 63 29 29 7b 76 61 72 20 62 3d 24 4c 2e 5f 6e 45 2b 63 3b 69 66 28 5f 68 58 28 61 5b 62 5d 29 26 26 61 5b 62 5d 2e 5f 63 75 73 74 6f 6d 45 76 65 Data Ascii: $L.get(a))})},_cw:function(b,a){$J._lF(b)&&_F(a)&&$L.add(b,a,function(a){$L._eO($L.get(a))})},_cL:function(b,a){if(_hX(a)&&_F(b)){var c=new $L._AR(b);a[c.type]=c}},_jO:function(c,a){var d=null;if(_hX(a)&&_F(c)){var b=$L._nE+c;if(_hX(a[b])&&a[b]._customEve
2024-10-28 17:03:17 UTC	7905	IN	Data Raw: 65 6e 67 74 68 2d 32 29 29 3b 72 65 74 75 72 6e 20 62 2b 61 2e 6a 6f 69 6e 28 22 2e 22 29 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 62 2b 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 7d 7d 3b 24 48 2e 24 41 67 3d 7b 5f 6b 37 3a 32 39 36 38 2c 22 67 65 74 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 48 2e 5f 6a 57 28 24 48 2e 24 67 2e 5f 72 38 29 7d 2c 22 73 65 74 22 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 24 48 2e 77 72 69 74 65 28 24 48 2e 24 67 2e 5f 72 38 2c 24 48 2e 5f 6d 36 28 62 29 2c 74 72 75 65 2c 24 48 2e 5f 6a 71 28 74 72 75 65 2c 61 29 29 7d 2c 5f 67 74 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 62 29 7b 74 72 79 7b 76 61 72 20 61 3d 6e 65 77 20 44 61 74 65 2d 63 3b 24 48 2e 24 41 67 2e 73 65 74 28 7b 74 68 72 6f 75 67 68 70 75 74 Data Ascii: ength-2));return b+a.join(".")}else return b+document.domain}};$H.$Ag={_k7:2968,"get":function(){return $H._jW($H.$g._r8)},"set":function(b,a){$H.write($H.$g._r8,$H._m6(b),true,$H._jq(true,a))},_gt:function(c,b){try{var a=new Date-c;$H.$Ag.set({throughput

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49809	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:33 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:34 UTC	561	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:33 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 27 Oct 2024 10:35:44 GMT ETag: "0x8DCF6731CF80310" x-ms-request-id: 89d6c6b8-201e-0033-2798-28b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170333Z-17fbfdc98bbsq6qfu114w62x8n000000047g000000001h69 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:34 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-28 17:03:34 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-28 17:03:34 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-28 17:03:34 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-28 17:03:34 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-28 17:03:34 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-28 17:03:34 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-28 17:03:34 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-28 17:03:34 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-28 17:03:34 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:35 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:35 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 7920d540-e01e-0085-1f11-29c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170335Z-17fbfdc98bbh7l5skzh3rekksc00000006r00000000093p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:35 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:35 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:35 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c4ab37c7-901e-002a-3417-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170335Z-17fbfdc98bbt5dtr27n1qp1eqc00000005dg00000000g3aa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:35 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:35 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:35 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:35 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170335Z-r1755647c66x2fg5vpbex0bd8400000006ug000000004bds x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:35 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:35 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:35 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 8f1f3dd8-601e-0097-4789-28f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170335Z-r1755647c66tsn7nz9wda692z000000003r0000000008wz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:35 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:35 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:35 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170335Z-17fbfdc98bbnsg5pw6rasm3q8s00000005q000000000c7m1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:35 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:36 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170336Z-17fbfdc98bbnsg5pw6rasm3q8s00000005mg00000000gq68 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:36 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: bbf1142f-f01e-0085-589b-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170336Z-r1755647c666s72wx0z5rz6s6000000006c0000000009uh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:36 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170336Z-17fbfdc98bbds27mnhu6ftg4d800000003r000000000922x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:36 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:36 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 895e1389-601e-005c-16b8-20f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170336Z-r1755647c66gqcpzhw8q9nhnq00000000630000000009nzq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:36 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:36 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:36 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170336Z-17fbfdc98bbsw6nnfh43fuwvyn00000003g0000000005xey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:36 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:37 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:37 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f66eff46-601e-0084-3c9d-276b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170337Z-17fbfdc98bbbnx4ldgze4de5zs00000003vg00000000fpuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:37 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49822	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:37 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: fcb0891e-801e-007b-6669-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170337Z-r1755647c66ljccje5cnds62nc000000045g000000001689 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49821	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:37 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:37 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9985b9b7-a01e-0021-5827-28814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170337Z-17fbfdc98bblzxqcphe71tp4qw00000000m000000000fr5m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:37 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:37 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:37 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: abb1733e-f01e-005d-6a3c-2813ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170337Z-17fbfdc98bb2rxf2hfvcfz5400000000034g00000000gnxb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:37 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:37 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:37 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170337Z-r1755647c66t77qv3m6k1gb3zw00000004yg00000000bqxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:37 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:38 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:38 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 898be286-601e-003d-2804-276f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170338Z-r1755647c66ldhdjeavapf4fd000000005ag00000000cp42 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:38 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 77b1f39f-101e-0079-106b-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170338Z-17fbfdc98bbds27mnhu6ftg4d800000003m000000000fh7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:38 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170338Z-r1755647c66tgwsmrrc4e69sk000000004g000000000mqfq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49828	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:38 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:38 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 214ea441-b01e-00ab-0e9b-27dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170338Z-17fbfdc98bbx59j5xd9kpbrs8400000004vg0000000061xv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:38 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:38 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:38 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: bb58e6ef-e01e-000c-4187-288e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170338Z-r1755647c66hbclz9tgqkaxg2w00000006vg00000000baqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:38 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:39 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170339Z-17fbfdc98bbt5dtr27n1qp1eqc00000005eg00000000ew82 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:39 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: faf669f2-101e-0065-23a4-264088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170339Z-r1755647c66kcsqh9hy6eyp6kw00000003g000000000d9ng x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:39 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:39 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 338c7fbe-d01e-0028-7d3c-287896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170339Z-r1755647c66hxv26qums8q8fsw00000003c000000000e8u5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:39 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8ee7b399-e01e-0033-0c50-234695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170339Z-17fbfdc98bbtwz55a8v24wfkdw00000006cg00000000dpku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49835	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:39 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:39 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 2d06c87c-b01e-0021-139b-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170339Z-17fbfdc98bbx59j5xd9kpbrs8400000004wg0000000033yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:39 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:40 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 08308beb-701e-001e-43b0-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170340Z-17fbfdc98bbwmxz5amc6q625w0000000019g00000000c7gg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:40 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:40 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170340Z-r1755647c66ldhdjeavapf4fd0000000058g00000000gnmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:40 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:40 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 346ac1b5-f01e-003f-6ed5-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170340Z-r1755647c66ldhdjeavapf4fd000000005eg000000002hf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:40 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0883ffbf-f01e-001f-3811-295dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170340Z-r1755647c66z4xgb5rng8h32e8000000045g00000000h5yt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:40 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: ae9ca414-101e-008d-470d-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170340Z-17fbfdc98bb2xwflv0w9dps90c000000069g00000000067p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:41 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:41 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:41 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170341Z-17fbfdc98bb7jfvg3dxcbz5xm000000003ng000000009bvz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:41 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:41 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:41 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170341Z-r1755647c66ss75qkr31zpy1kc00000004xg00000000egna x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:41 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:41 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b953619b-001e-0017-7a89-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170341Z-r1755647c66vkwr5neys93e0h400000004yg000000002c5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:41 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: cbc8156d-001e-0079-70f5-2512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170341Z-r1755647c664nptf1txg2psens000000043g00000000d8up x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:42 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:42 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170342Z-r1755647c66vwt2b5wfzb6a20400000001xg00000000f846 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:42 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:42 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:42 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170342Z-r1755647c66vwt2b5wfzb6a204000000021g000000008592 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:42 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49848	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:42 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 2a077843-d01e-0049-74a3-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170342Z-17fbfdc98bbl4n669ut4r27e0800000004w000000000h1yh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:42 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:42 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e7cc90bd-401e-0029-032a-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170342Z-17fbfdc98bbgm62892kdp1w19800000004g0000000003det x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:42 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:42 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:42 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2ee95feb-501e-0029-5d17-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170342Z-17fbfdc98bblzxqcphe71tp4qw00000000sg000000004d8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:42 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:43 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:43 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 2399187d-801e-008f-5f67-282c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170343Z-r1755647c66ss75qkr31zpy1kc00000004vg00000000gn3c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:43 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:43 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:43 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170343Z-17fbfdc98bbds27mnhu6ftg4d800000003tg000000002gt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:43 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:43 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:43 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170343Z-17fbfdc98bb8mkvjfkt54wa538000000037000000000cbfv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:43 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:43 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:43 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170343Z-17fbfdc98bbz4mxcabnudsmquw00000004bg0000000087fy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:43 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:43 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:43 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2125f972-501e-0035-10a3-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170343Z-r1755647c66hlhp26bqv22ant400000005d000000000efcu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:43 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:44 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:44 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a93e4d9c-801e-0015-6aa4-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170344Z-r1755647c668lcmr2va34xxa5s00000003wg00000000fw0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:44 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:44 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170344Z-r1755647c66ljccje5cnds62nc000000043000000000728u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:44 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: cb602259-c01e-0046-02b2-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170344Z-17fbfdc98bbvvplhck7mbap4bw00000006yg00000000byzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:44 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 86dc56c9-201e-00aa-5987-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170344Z-r1755647c66x2fg5vpbex0bd8400000006q000000000ef40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:44 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0688ef78-901e-0029-5550-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170344Z-17fbfdc98bb6vp4m3kc0kte9cs000000065g000000004k72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:45 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 39bce04a-301e-0051-2eae-2638bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170345Z-r1755647c66x7vzx9armv8e3cw00000006yg00000000ckxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:45 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170345Z-17fbfdc98bb2cvg4m0cmab3ecw0000000440000000003zfn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:45 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170345Z-r1755647c668lcmr2va34xxa5s00000003x000000000ex1v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:45 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 57638fd1-a01e-0053-7b67-288603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170345Z-r1755647c66trqwgqbys9wk81g00000003yg000000004rev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:45 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: a8de1b79-001e-0017-5ba3-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170345Z-r1755647c66vxbtprd2g591tyg0000000520000000002pm1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:46 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 5b2d2bb9-d01e-0028-519c-277896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170346Z-17fbfdc98bbgnnfwq36myy7z0g00000005v000000000dc8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:46 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:46 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170346Z-r1755647c66hbclz9tgqkaxg2w00000006yg000000003pd7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:46 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:46 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:46 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 18df47ae-c01e-00a1-2249-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170346Z-17fbfdc98bbzsht4r5d3e0kyc000000004h000000000akxp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:46 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:46 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:46 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: ab84cae0-f01e-005d-23d7-2513ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170346Z-r1755647c66vpf8fnbgmzm21hs000000068000000000aqem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:46 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:46 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ca6c0e2f-901e-008f-5413-2667a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170346Z-17fbfdc98bb2cvg4m0cmab3ecw0000000420000000008g31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:46 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:46 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 4e972348-801e-00ac-276d-28fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170346Z-r1755647c66vwt2b5wfzb6a204000000020g0000000095he x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:47 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:47 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:47 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 481bd859-201e-00aa-219c-273928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170347Z-r1755647c665dwkwce4e7gadz0000000065g000000008aqw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:47 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49873	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:47 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:47 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5ef35a72-501e-007b-6836-285ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170347Z-17fbfdc98bb7jfvg3dxcbz5xm000000003k000000000d6vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:47 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:47 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:47 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2e5beeba-d01e-002b-6c67-2825fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170347Z-r1755647c66x7vzx9armv8e3cw000000072g000000001zrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:47 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:47 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:47 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 04de2316-001e-0082-3987-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170347Z-17fbfdc98bbngfjxtncsq24exs000000074g0000000034yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:47 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49876	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:47 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:47 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 321a447c-801e-002a-4da3-2631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170347Z-17fbfdc98bbtwz55a8v24wfkdw00000006gg000000006afy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:48 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:48 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:48 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 6c7958f7-701e-001e-113a-29f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170348Z-17fbfdc98bbds27mnhu6ftg4d800000003m000000000fhwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:48 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:48 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:48 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170348Z-r1755647c66tsn7nz9wda692z000000003s0000000004ex7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:48 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49879	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:48 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170348Z-17fbfdc98bbp77nqf5g2c5aavs00000004z0000000009ryg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:48 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49880	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:48 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170348Z-17fbfdc98bb2xwflv0w9dps90c000000067g0000000062m9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49881	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:48 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:48 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: b8f0a3b1-001e-0017-5067-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170348Z-17fbfdc98bb5d4fn785en176rg00000005a000000000btyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:48 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49882	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:48 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170348Z-17fbfdc98bbx59j5xd9kpbrs8400000004v0000000007y8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49883	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:48 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 214eaf96-b01e-00ab-509c-27dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170349Z-r1755647c66z67vn9nc21z11a800000004ng00000000erc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:49 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:49 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:49 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170349Z-r1755647c66tgwsmrrc4e69sk000000004p0000000006903 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:49 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49885	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:49 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:49 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170349Z-17fbfdc98bbnsg5pw6rasm3q8s00000005sg000000006tqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:49 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49886	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:49 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:49 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 071448c9-d01e-0028-2702-297896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170349Z-r1755647c66x2fg5vpbex0bd8400000006ng00000000hh21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:49 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49889	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:49 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:50 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 170621ef-f01e-003f-351f-28d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170350Z-17fbfdc98bbp77nqf5g2c5aavs0000000510000000005q1r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:50 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49888	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:49 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:50 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170350Z-r1755647c66z67vn9nc21z11a800000004ug00000000139a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:50 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49887	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:49 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:50 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: ba33cc4f-e01e-0052-2e6f-28d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170350Z-r1755647c66hpt4fmfneq8rup800000002h000000000a142 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:50 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49890	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:50 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:50 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170350Z-r1755647c668lcmr2va34xxa5s0000000430000000000a8d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:50 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49891	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:50 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:50 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d72005e7-a01e-0002-1a61-285074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170350Z-17fbfdc98bb7jfvg3dxcbz5xm000000003qg000000003d4f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:50 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49893	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:50 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:50 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170350Z-r1755647c66gqcpzhw8q9nhnq0000000062g00000000a8wa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:51 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49894	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:50 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:50 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 3529fceb-001e-0065-1625-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170350Z-17fbfdc98bb6vp4m3kc0kte9cs000000060000000000fevs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:51 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49895	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:50 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:50 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 37a0b860-701e-0001-05e6-27b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170350Z-17fbfdc98bbh7l5skzh3rekksc00000006t0000000003ene x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:51 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49892	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:50 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:50 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170350Z-r1755647c66vpf8fnbgmzm21hs00000006ag000000004vbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:51 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49896	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:51 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:51 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170351Z-r1755647c6688lj6g0wg0rqr1400000005g000000000bhqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:51 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49899	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:51 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:51 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170351Z-17fbfdc98bb6kklk3r0qwaavtw000000038g00000000bht2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:51 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49900	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:51 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:51 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170351Z-r1755647c66hlhp26bqv22ant400000005fg000000009fk1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49898	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:51 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:51 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170351Z-r1755647c66gqcpzhw8q9nhnq00000000650000000003nth x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49897	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:51 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:52 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a52fde13-501e-0078-6a5d-2306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170352Z-17fbfdc98bblfj7gw4f18guu2800000006wg000000000yvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:52 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49901	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:52 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:52 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 78a8beb2-e01e-0071-6ad7-2508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170352Z-17fbfdc98bbngfjxtncsq24exs00000006zg00000000cuyc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:52 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49904	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:53 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:53 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170353Z-17fbfdc98bbdbgkb6uyh3q4ue400000004r0000000008k7w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:53 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49903	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:53 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:53 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 9cbc9553-801e-008f-2aa3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170353Z-17fbfdc98bbt5dtr27n1qp1eqc00000005k0000000007fz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:53 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49902	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:53 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:53 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 667d1099-601e-003e-17c9-203248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170353Z-r1755647c665dwkwce4e7gadz000000006600000000076qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:53 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49905	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:53 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:53 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: c4db5382-b01e-0002-089c-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170353Z-r1755647c66pzcrw3ktqe96x2s00000006pg00000000214t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:53 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49906	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:53 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:53 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170353Z-r1755647c666s72wx0z5rz6s6000000006a000000000d52a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:53 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49909	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:53 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170353Z-17fbfdc98bbp77nqf5g2c5aavs00000004xg00000000cass x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:54 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49910	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:53 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:53 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170353Z-r1755647c66pzcrw3ktqe96x2s00000006n0000000005u2q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:54 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49908	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:53 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:53 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 08154944-901e-0083-2112-29bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170353Z-17fbfdc98bbx59j5xd9kpbrs8400000004x00000000027b5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:54 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49911	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:53 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: ead33fc5-401e-0029-0967-289b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170353Z-r1755647c66mmrln9nsykf75u800000004cg00000000a769 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:54 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49912	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:54 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:54 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 4bfb087f-501e-008f-4c9c-279054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170354Z-17fbfdc98bb2rxf2hfvcfz540000000003ag000000004c2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:54 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49913	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:54 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:54 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170354Z-r1755647c66hbclz9tgqkaxg2w00000006w000000000a3w2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:54 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49914	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:54 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:54 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: fcac5f09-801e-007b-3f67-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170354Z-r1755647c66tgwsmrrc4e69sk000000004r0000000000wfv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:54 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49915	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:54 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:54 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170354Z-17fbfdc98bbt5dtr27n1qp1eqc00000005e000000000ex36 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:54 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49916	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:54 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:54 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170354Z-r1755647c66hbclz9tgqkaxg2w000000070000000000010u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:54 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49918	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:55 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:55 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 04ace5c9-101e-007a-5c26-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170355Z-r1755647c66pzcrw3ktqe96x2s00000006gg00000000cdgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:55 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49919	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:55 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:55 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c91d50fe-d01e-0049-5267-28e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170355Z-17fbfdc98bb2rxf2hfvcfz5400000000036000000000dtg8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:55 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49920	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:55 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:55 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170355Z-r1755647c66hxv26qums8q8fsw00000003fg000000007wng x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:55 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49922	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:55 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 44c445c3-601e-003e-0f9c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170355Z-17fbfdc98bbh7l5skzh3rekksc00000006r00000000094hg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49921	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:55 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 19d379a2-b01e-0084-4b5b-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170355Z-17fbfdc98bbx59j5xd9kpbrs8400000004u0000000009pvb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49923	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:56 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 43b0bec6-701e-0050-4289-286767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170356Z-17fbfdc98bbwmxz5amc6q625w000000001d0000000003czv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49924	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:56 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: cdbf2577-c01e-0034-7dc2-262af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170356Z-17fbfdc98bb6kklk3r0qwaavtw000000039000000000aptm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49925	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:56 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:56 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:56 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170356Z-r1755647c66pzcrw3ktqe96x2s00000006ng000000004tes x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:56 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49926	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:56 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:56 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170356Z-r1755647c66kcsqh9hy6eyp6kw00000003gg00000000d7aw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49927	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:56 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:56 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:56 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170356Z-17fbfdc98bb2rxf2hfvcfz5400000000036g00000000d7rt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:56 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49928	13.107.253.45	443	1004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:57 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:57 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 84f987b9-901e-0083-2ea3-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170357Z-17fbfdc98bbnsg5pw6rasm3q8s00000005n000000000ff3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:57 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49929	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:57 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:57 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170357Z-17fbfdc98bbngfjxtncsq24exs000000071000000000a1s8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49930	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:57 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:57 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 0ad7b348-901e-0067-0d67-28b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170357Z-r1755647c66ljccje5cnds62nc000000043g000000007h9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:57 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49931	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:57 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:57 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170357Z-r1755647c66ldhdjeavapf4fd000000005a000000000d34u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:57 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49932	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:57 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:57 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 35d0191b-501e-0047-5a17-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170357Z-17fbfdc98bb2rxf2hfvcfz5400000000037g00000000ax0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 17:03:57 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49933	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:58 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:58 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 23449c74-401e-0083-0a50-23075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170358Z-17fbfdc98bb2xwflv0w9dps90c000000064000000000ckrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:58 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49934	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:58 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 17:03:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 17:03:58 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 78a5f633-501e-005b-51a6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T170358Z-r1755647c66vpf8fnbgmzm21hs00000006a0000000006bmp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 17:03:58 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49935	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:58 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49936	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:58 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49937	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 17:03:58 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Target ID:	0
Start time:	13:02:31
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:02:36
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2016,i,5069373808085024677,3499890254720357829,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:02:38
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Windows Analysis Report
https://1drv.ms/o/s!BOd5RNxFaxkGg1r5bc30bgQWmkNc?e=J67qxK-KfEurqpMk0dasTw&at=9