Edit tour

Windows Analysis Report
http://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA=

Overview

General Information

Sample URL:	http://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA=
Analysis ID:	1545515
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2012,i,1598354833328977801,17481950832282931190,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49860 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA= HTTP/1.1Host: outlook.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA= HTTP/1.1Host: outlook.live.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=l1mPvGco5d1M2Vc&MD=+SWeUmr9 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=l1mPvGco5d1M2Vc&MD=+SWeUmr9 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA= HTTP/1.1Host: outlook.live.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA= HTTP/1.1Host: outlook.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: outlook.live.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49860 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@20/0@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2012,i,1598354833328977801,17481950832282931190,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2012,i,1598354833328977801,17481950832282931190,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
olc-g2.tm-4.office.com	40.99.150.50	true	false	unknown
FRA-efz.ms-acdc.office.com	40.99.157.50	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
outlook.live.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA=	false		unknown
http://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA=	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
40.99.157.50	FRA-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.99.149.130	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.99.150.50	olc-g2.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545515
Start date and time:	2024-10-30 16:27:58 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@20/0@8/6

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 142.250.185.110, 173.194.76.84, 34.104.35.123, 93.184.221.240, 20.242.39.171, 192.229.221.95, 20.3.187.198, 142.250.186.131
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA=

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 16:28:49.201674938 CET	49675	443	192.168.2.4	173.222.162.32
Oct 30, 2024 16:28:58.460072041 CET	49735	80	192.168.2.4	40.99.150.50
Oct 30, 2024 16:28:58.460207939 CET	49736	80	192.168.2.4	40.99.150.50
Oct 30, 2024 16:28:58.465531111 CET	80	49735	40.99.150.50	192.168.2.4
Oct 30, 2024 16:28:58.465586901 CET	80	49736	40.99.150.50	192.168.2.4
Oct 30, 2024 16:28:58.465612888 CET	49735	80	192.168.2.4	40.99.150.50
Oct 30, 2024 16:28:58.465645075 CET	49736	80	192.168.2.4	40.99.150.50
Oct 30, 2024 16:28:58.476378918 CET	49736	80	192.168.2.4	40.99.150.50
Oct 30, 2024 16:28:58.481998920 CET	80	49736	40.99.150.50	192.168.2.4
Oct 30, 2024 16:28:58.807892084 CET	49675	443	192.168.2.4	173.222.162.32
Oct 30, 2024 16:28:59.323854923 CET	80	49736	40.99.150.50	192.168.2.4
Oct 30, 2024 16:28:59.324311018 CET	49736	80	192.168.2.4	40.99.150.50
Oct 30, 2024 16:28:59.330234051 CET	80	49736	40.99.150.50	192.168.2.4
Oct 30, 2024 16:28:59.330315113 CET	49736	80	192.168.2.4	40.99.150.50
Oct 30, 2024 16:28:59.335971117 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:28:59.336030006 CET	443	49737	40.99.157.50	192.168.2.4
Oct 30, 2024 16:28:59.336108923 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:28:59.336306095 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:28:59.336340904 CET	443	49737	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:00.458524942 CET	443	49737	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:00.458889008 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:00.458930969 CET	443	49737	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:00.459994078 CET	443	49737	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:00.460089922 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:00.460099936 CET	443	49737	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:00.460143089 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:00.462033987 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:00.462097883 CET	443	49737	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:00.462373972 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:00.462379932 CET	443	49737	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:00.516263008 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:00.721821070 CET	443	49737	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:00.722964048 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:00.723016024 CET	443	49737	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:00.723061085 CET	49737	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:01.822453022 CET	49740	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:01.822570086 CET	443	49740	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:01.822654009 CET	49740	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:01.824261904 CET	49740	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:01.824300051 CET	443	49740	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:01.959888935 CET	49742	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:29:01.959934950 CET	443	49742	142.250.185.228	192.168.2.4
Oct 30, 2024 16:29:01.960144997 CET	49742	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:29:01.960391045 CET	49742	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:29:01.960403919 CET	443	49742	142.250.185.228	192.168.2.4
Oct 30, 2024 16:29:02.674253941 CET	443	49740	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:02.674382925 CET	49740	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:02.691526890 CET	49740	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:02.691586018 CET	443	49740	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:02.691941977 CET	443	49740	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:02.746738911 CET	49740	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:02.799171925 CET	49740	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:02.837025881 CET	443	49742	142.250.185.228	192.168.2.4
Oct 30, 2024 16:29:02.838682890 CET	49742	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:29:02.838706017 CET	443	49742	142.250.185.228	192.168.2.4
Oct 30, 2024 16:29:02.840341091 CET	443	49742	142.250.185.228	192.168.2.4
Oct 30, 2024 16:29:02.840405941 CET	49742	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:29:02.843338013 CET	443	49740	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:02.847223997 CET	49742	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:29:02.847311020 CET	443	49742	142.250.185.228	192.168.2.4
Oct 30, 2024 16:29:02.887320995 CET	49742	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:29:02.887345076 CET	443	49742	142.250.185.228	192.168.2.4
Oct 30, 2024 16:29:02.934196949 CET	49742	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:29:03.042576075 CET	443	49740	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:03.042768955 CET	443	49740	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:03.042834044 CET	49740	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:03.042834044 CET	49740	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:03.042923927 CET	443	49740	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:03.042965889 CET	49740	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:03.042983055 CET	443	49740	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:03.086662054 CET	49743	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:03.086714983 CET	443	49743	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:03.087097883 CET	49743	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:03.087661028 CET	49743	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:03.087681055 CET	443	49743	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:03.929867029 CET	443	49743	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:03.929960012 CET	49743	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:03.931832075 CET	49743	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:03.931847095 CET	443	49743	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:03.932172060 CET	443	49743	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:03.934753895 CET	49743	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:03.979330063 CET	443	49743	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:04.176665068 CET	443	49743	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:04.176835060 CET	443	49743	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:04.176898003 CET	49743	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:04.178096056 CET	49743	443	192.168.2.4	184.28.90.27
Oct 30, 2024 16:29:04.178121090 CET	443	49743	184.28.90.27	192.168.2.4
Oct 30, 2024 16:29:11.549334049 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:11.549427986 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:11.549519062 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:11.550915003 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:11.550951004 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:12.155359983 CET	49745	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:12.155411959 CET	443	49745	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:12.155473948 CET	49745	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:12.155935049 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:12.155986071 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:12.156048059 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:12.158922911 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:12.158941984 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:12.159094095 CET	49745	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:12.159111977 CET	443	49745	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:12.507661104 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:12.507767916 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:12.510524988 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:12.510550022 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:12.511058092 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:12.562010050 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:12.816267014 CET	443	49742	142.250.185.228	192.168.2.4
Oct 30, 2024 16:29:12.816462040 CET	443	49742	142.250.185.228	192.168.2.4
Oct 30, 2024 16:29:12.816565990 CET	49742	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:29:13.280220985 CET	443	49745	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.280615091 CET	49745	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.280647993 CET	443	49745	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.280961037 CET	443	49745	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.281397104 CET	49745	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.281460047 CET	443	49745	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.281605959 CET	49745	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.282597065 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.282855034 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.282917023 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.287373066 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.287465096 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.287519932 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.287576914 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.287983894 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.288218021 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.327336073 CET	443	49745	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.342334032 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.342390060 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.388240099 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.432544947 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:13.475369930 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:13.515604973 CET	49742	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:29:13.515675068 CET	443	49742	142.250.185.228	192.168.2.4
Oct 30, 2024 16:29:13.559248924 CET	443	49745	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.560297966 CET	49745	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.560375929 CET	443	49745	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.560528994 CET	443	49745	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:13.560630083 CET	49745	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.560672998 CET	49745	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:13.742108107 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:13.742141962 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:13.742151976 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:13.742170095 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:13.742197990 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:13.742228985 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:13.742301941 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:13.742341995 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:13.742367029 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:13.742739916 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:13.742814064 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:13.742830038 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:13.748486042 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:13.751651049 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:15.254122019 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:15.254165888 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:15.254204035 CET	49744	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:15.254221916 CET	443	49744	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:43.466216087 CET	49735	80	192.168.2.4	40.99.150.50
Oct 30, 2024 16:29:43.472199917 CET	80	49735	40.99.150.50	192.168.2.4
Oct 30, 2024 16:29:47.588641882 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:47.588685036 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:47.588741064 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:47.589375019 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:47.589390993 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.343116999 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.343219042 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.346322060 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.346330881 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.346577883 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.353456974 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.395338058 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.598505974 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.598536015 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.598558903 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.598598957 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.598614931 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.598630905 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.598701000 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.716177940 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.716206074 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.716293097 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.716308117 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.716353893 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.833787918 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.833837986 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.833874941 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.833887100 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.833904028 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.833949089 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.952116013 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.952178955 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.952189922 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.952205896 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:48.952224016 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:48.952244043 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.109553099 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.109580040 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.109633923 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.109648943 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.109677076 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.109695911 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.187340975 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.187360048 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.187398911 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.187412024 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.187438011 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.187453985 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.304616928 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.304641962 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.304677010 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.304689884 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.304714918 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.304727077 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.423561096 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.423588991 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.423633099 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.423645973 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.423676014 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.423687935 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.515443087 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.515469074 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.515507936 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.515518904 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.515549898 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.515567064 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.580673933 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.580707073 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.580744982 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.580760002 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.580790043 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.580800056 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.698154926 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.698182106 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.698260069 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.698260069 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.698275089 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.698332071 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.776681900 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.776711941 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.776789904 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.776789904 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.776804924 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.776978016 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.893052101 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.893074036 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.893157959 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.893157959 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.893170118 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.893265963 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.893430948 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.893515110 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.893544912 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.893565893 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.893565893 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.893588066 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.893616915 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.893625975 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.951351881 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.951412916 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.951520920 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.953157902 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.953171968 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.953181028 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.953217030 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.953807116 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.954020977 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.954037905 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.954057932 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.954073906 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.954147100 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.954761982 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.954852104 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.954876900 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.954885006 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.954895020 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.954927921 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.954969883 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.955008984 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.955044985 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.955071926 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:49.955112934 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:49.955127001 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.678533077 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.679090977 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.679105997 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.679575920 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.679583073 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.686702967 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.687115908 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.687161922 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.687586069 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.687594891 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.690532923 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.690882921 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.690906048 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.691346884 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.691353083 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.695432901 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.695770979 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.695802927 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.696206093 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.696212053 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.697369099 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.697705984 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.697742939 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.698074102 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.698080063 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.808939934 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.808965921 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.809031010 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.809051037 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.809092045 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.809425116 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.809456110 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.809463978 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.809470892 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.812092066 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.812134981 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.812216043 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.812335014 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.812350035 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.820283890 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.820451975 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.820569992 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.820621967 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.820622921 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.820643902 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.820656061 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.822566032 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.822613001 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.822841883 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.822962999 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.822979927 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.830209970 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.830240011 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.830296040 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.830318928 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.830336094 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.830359936 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.830374956 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.830514908 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.830530882 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.830543995 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.830549955 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.832591057 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.832628965 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.832842112 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.832994938 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.833008051 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.841837883 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.842443943 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.842499018 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.842545033 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.842545033 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.842566967 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.842580080 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.844572067 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.844619036 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.844765902 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.844868898 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.844887018 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.910300016 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.910327911 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.910382986 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.910391092 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.910428047 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.910597086 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.910609961 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.910628080 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.910634995 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.912740946 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.912756920 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:50.912811041 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.912921906 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:50.912933111 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.557760954 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.558142900 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.558605909 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.558638096 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.559396029 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.559402943 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.559925079 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.559964895 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.560417891 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.560422897 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.587327003 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.587763071 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.587781906 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.588325024 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.588335037 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.588573933 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.588958979 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.589019060 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.589781046 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.589795113 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.646821976 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.664268017 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.664313078 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.665080070 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.665086985 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.687685966 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.687740088 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.687815905 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.688680887 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.688827991 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.688827991 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.688852072 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.688863039 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.690475941 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.690794945 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.690794945 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.690855026 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.690888882 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.694634914 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.694694042 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.695916891 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.695962906 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.695992947 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.696295977 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.696429968 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.696448088 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.696619987 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.696639061 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.719696999 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.719769955 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.721910954 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.724699974 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.724889040 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.725136042 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.728343010 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.728364944 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.728391886 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.728399992 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.730870962 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.730902910 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.730940104 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.730957985 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.737903118 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.737986088 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.738357067 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.738544941 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.738549948 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.738574028 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.738596916 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.738632917 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.738939047 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.738955975 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.791857958 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.792505980 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.792840004 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.828495979 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.828528881 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.828859091 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.828867912 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.837642908 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.837699890 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.837783098 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.838099957 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:51.838141918 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:51.856718063 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:51.856770992 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:51.862407923 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:51.862407923 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:51.862452030 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:52.425609112 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.426335096 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.426367998 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.428765059 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.428811073 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.428819895 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.429570913 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.429605007 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.430747032 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.430768967 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.476629972 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.477510929 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.477569103 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.478312969 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.478327036 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.506458998 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.507298946 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.507350922 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.509635925 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.509660006 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.556315899 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.556498051 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.556802034 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.556865931 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.556865931 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.556893110 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.556909084 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.559360027 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.559762955 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.560826063 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.560874939 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.560909033 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.561011076 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.561012983 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.561033010 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.561065912 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.561073065 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.561647892 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.561665058 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.564985991 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.565043926 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.565259933 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.565419912 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.565435886 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.574040890 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.575000048 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.575000048 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.575030088 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.575053930 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.625248909 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.625338078 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.625389099 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.625581026 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.625605106 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.625621080 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.625628948 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.628386974 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.628433943 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.628501892 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.628617048 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.628637075 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.640471935 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.641021013 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.641069889 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.641109943 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.641130924 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.641145945 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.641151905 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.643625021 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.643666983 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.643795967 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.643970966 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.643980980 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.704828978 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.704933882 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.704987049 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.705115080 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.705142975 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.705157995 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.705164909 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.708070993 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.708101988 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.708170891 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.708352089 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:52.708368063 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:52.786720037 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:52.786791086 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:52.788938999 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:52.788959980 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:52.789248943 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:52.800470114 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:52.843354940 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.106741905 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.106762886 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.106770992 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.106782913 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.106817007 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.106832981 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:53.106870890 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.106888056 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:53.106920958 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:53.224143982 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.224205971 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.224211931 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:53.224248886 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.224271059 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.224272013 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:53.224313021 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:53.239178896 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:53.239222050 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.239244938 CET	49768	443	192.168.2.4	52.149.20.212
Oct 30, 2024 16:29:53.239255905 CET	443	49768	52.149.20.212	192.168.2.4
Oct 30, 2024 16:29:53.309175014 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.326587915 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.356616974 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.358937979 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.372262955 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.387089968 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.403500080 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.429491997 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.429522038 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.430757999 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.430763006 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.431010008 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.431044102 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.432182074 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.432195902 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.441241026 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.441251040 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.442347050 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.442351103 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.443443060 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.443470955 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.444500923 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.444511890 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.456115961 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.457045078 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.457062006 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.458718061 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.458724022 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.559678078 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.559751987 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.559808016 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.569725990 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.569818974 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.569902897 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.570780039 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.570832968 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.570889950 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.574291945 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.574450016 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.574492931 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.588836908 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.588912010 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.588967085 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.592885971 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.592917919 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.592935085 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.592941046 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.595478058 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.595501900 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.595530033 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.595535994 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.598208904 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.598228931 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.598572969 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.598581076 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.599298000 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.599359989 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.602314949 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.602329016 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.602370024 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.602384090 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.617501020 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.617527962 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.617695093 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.620138884 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.620165110 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.620366096 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.623723984 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.623770952 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.623847008 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.625514030 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.625550985 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.625616074 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.626450062 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.626458883 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.626677990 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.626691103 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.627579927 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.627584934 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.627605915 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.627628088 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.627723932 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.628082037 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.628108025 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:53.629568100 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:53.629586935 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.356873035 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.357646942 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.357683897 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.357975006 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.357985020 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.364506960 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.364943981 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.364964008 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.365406036 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.365421057 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.366877079 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.367572069 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.367599010 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.367672920 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.367682934 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.383135080 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.384143114 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.384143114 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.384191036 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.384211063 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.403656006 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.404465914 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.404498100 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.404928923 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.404938936 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.503832102 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.503985882 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.504096031 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.504256964 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.504256964 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.504296064 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.504311085 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.507404089 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.507460117 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.507708073 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.507708073 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.507745981 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.508059025 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.508141041 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.508275986 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.508275986 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.508342981 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.508359909 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.511013031 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.511045933 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.511229038 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.511281967 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.511291981 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.514473915 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.514533043 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.514679909 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.514679909 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.514740944 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.514754057 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.515010118 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.515063047 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.515150070 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.515207052 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.515224934 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.515243053 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.515249968 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.517153978 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.517190933 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.517311096 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.517450094 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.517462969 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.517666101 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.517688036 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.517890930 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.517891884 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.517925978 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.549413919 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.549628973 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.549743891 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.549743891 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.550015926 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.550056934 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.552093983 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.552131891 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:54.552306890 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.552357912 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:54.552365065 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.239835978 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.248688936 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.249979019 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.250320911 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.250338078 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.251190901 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.251203060 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.251835108 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.251851082 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.252572060 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.252585888 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.256679058 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.268644094 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.268670082 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.269582987 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.269588947 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.273180008 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.273205042 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.274112940 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.274125099 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.323709965 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.345235109 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.345248938 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.346239090 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.346242905 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.379823923 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.379931927 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.379986048 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.381119013 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.381141901 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.381156921 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.381165028 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.393949032 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.394030094 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.394078970 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.398935080 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.398997068 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.399041891 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.404155970 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.404216051 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.404263973 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.432188034 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.432225943 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.432240963 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.432249069 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.433998108 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.434026957 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.434046030 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.434052944 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.434504032 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.434511900 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.434521914 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.434525013 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.479717016 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.479783058 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.479830980 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.493761063 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.493823051 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.493906975 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.497509003 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.497526884 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.497536898 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.497541904 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.558120966 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.558152914 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.571747065 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.571851015 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.571927071 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.574770927 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.574804068 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.574861050 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.574923992 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.574959040 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.575076103 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.575089931 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.577049017 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.577073097 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.577131033 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.578685999 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.578741074 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.578798056 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.579060078 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.579093933 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:55.579345942 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:55.579375029 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.290955067 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.291636944 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.291666031 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.292934895 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.292938948 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.298746109 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.299107075 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.299185038 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.299474001 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.299487114 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.308929920 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.309304953 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.309335947 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.309689045 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.309696913 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.314179897 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.314570904 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.314585924 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.314949036 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.314958096 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.352346897 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.352694988 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.352705956 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.353050947 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.353055954 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.421389103 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.421696901 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.421752930 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.421901941 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.421925068 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.421936989 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.421941996 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.424670935 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.424726009 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.424798965 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.424937010 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.424953938 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.431376934 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.431623936 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.431771994 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.431824923 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.431866884 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.431900978 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.431915045 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.433578968 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.433620930 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.433764935 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.433892965 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.433912039 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.442264080 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.442322016 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.442378998 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.442497969 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.442507982 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.442542076 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.442548037 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.444196939 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.444240093 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.444324970 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.444423914 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.444442987 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.449352980 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.449439049 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.449512959 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.449604034 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.449604034 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.449621916 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.449644089 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.454761028 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.454796076 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.454993963 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.455107927 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.455123901 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.498673916 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.498742104 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.498789072 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.499171019 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.499191999 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.499207973 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.499212980 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.502698898 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.502803087 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:56.502943993 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.503082991 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:56.503115892 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.164716959 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.165230989 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.165281057 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.165669918 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.165683031 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.168927908 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.169343948 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.169383049 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.169702053 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.169708967 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.225496054 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.225903034 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.225931883 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.226290941 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.226295948 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.236008883 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.236347914 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.236423016 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.236721039 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.236735106 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.274033070 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.274370909 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.274388075 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.274759054 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.274765015 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.295764923 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.295823097 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.296024084 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.296063900 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.296087980 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.296103954 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.296111107 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.298762083 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.298801899 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.298976898 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.299132109 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.299143076 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.302347898 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.302598000 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.302656889 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.302700043 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.302700043 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.302717924 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.302731037 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.304601908 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.304636955 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.304738998 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.304866076 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.304877996 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.362288952 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.362406969 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.362580061 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.362624884 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.362624884 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.362642050 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.362652063 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.364706039 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.364756107 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.364897013 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.365036964 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.365052938 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.366803885 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.366897106 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.366967916 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.367047071 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.367048025 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.367090940 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.367104053 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.368918896 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.369003057 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.369108915 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.369239092 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.369271994 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.409650087 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.410028934 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.410077095 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.410103083 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.410118103 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.410132885 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.410139084 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.412256002 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.412301064 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:57.412362099 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.412508011 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:57.412528038 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.034962893 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.035446882 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.035520077 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.035883904 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.035896063 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.036166906 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.036472082 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.036546946 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.036818981 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.036834002 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.112637043 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.113086939 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.113114119 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.113519907 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.113527060 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.120102882 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.120449066 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.120508909 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.120796919 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.120811939 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.166527987 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.167079926 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.167098999 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.167530060 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.167587996 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.167654037 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.167773008 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.167778969 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.168283939 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.168330908 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.168380976 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.168396950 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.172054052 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.172115088 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.172209024 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.178716898 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.178765059 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.178842068 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.178863049 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.182962894 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.183016062 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.183093071 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.183900118 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.183944941 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.183999062 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.184123993 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.184137106 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.184464931 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.184483051 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.246710062 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.249654055 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.249711990 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.249752998 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.249767065 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.249779940 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.249785900 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.252239943 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.252258062 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.252325058 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.252468109 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.252481937 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.261384964 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.262552023 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.262732029 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.262778997 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.262778997 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.262799025 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.262820005 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.264938116 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.264980078 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.265095949 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.265248060 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.265259981 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.299392939 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.299609900 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.299669981 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.299705982 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.299717903 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.299738884 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.299742937 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.302009106 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.302040100 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.302265882 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.302386045 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.302400112 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.356648922 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:29:58.356658936 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:29:58.913731098 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.914751053 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.914751053 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.914767981 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.914783001 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.932538033 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.933320999 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.933320999 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.933353901 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.933402061 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.988325119 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.989268064 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.989268064 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:58.989289045 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:58.989300013 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.036328077 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.037223101 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.037223101 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.037266970 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.037281990 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.038260937 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.038892984 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.038892984 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.038908005 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.038921118 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.046922922 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.047059059 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.047288895 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.047288895 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.047713041 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.047727108 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.049688101 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.049734116 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.049909115 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.049909115 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.049943924 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.065829992 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.065907001 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.066157103 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.066157103 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.066288948 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.066312075 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.068424940 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.068459034 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.068624020 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.068692923 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.068706989 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.117072105 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.117146969 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.117350101 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.117350101 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.117443085 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.117451906 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.119795084 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.119837999 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.120013952 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.120130062 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.120143890 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.167491913 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.167577982 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.167797089 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.167797089 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.167850018 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.167866945 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.171695948 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.171737909 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.171921015 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.171921015 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.171947956 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.175376892 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.175424099 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.175585032 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.175585032 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.175605059 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.175616980 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.177397966 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.177440882 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.177649021 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.177716970 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.177730083 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.519826889 CET	49735	80	192.168.2.4	40.99.150.50
Oct 30, 2024 16:29:59.525717974 CET	80	49735	40.99.150.50	192.168.2.4
Oct 30, 2024 16:29:59.525995016 CET	49735	80	192.168.2.4	40.99.150.50
Oct 30, 2024 16:29:59.773432970 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.774009943 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.774028063 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.774698019 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.774702072 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.799840927 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.800393105 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.800410986 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.801182985 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.801188946 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.868362904 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.881927967 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.881939888 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.882929087 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.882932901 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.902033091 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.902280092 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.902337074 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.905823946 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.910536051 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.910563946 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.911493063 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.911524057 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.912365913 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.912373066 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.930264950 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.930362940 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.930562973 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.932075024 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.932111025 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.932190895 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.932471991 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.932485104 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.932580948 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.932600021 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.932615995 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.932622910 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.937383890 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.937426090 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.937633991 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.938319921 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.938338995 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.939136028 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.939753056 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.939762115 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 16:29:59.940618038 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:29:59.940622091 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.008193970 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.009340048 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.009397984 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.009434938 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.009459019 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.009470940 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.009478092 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.013746977 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.013787985 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.013875961 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.014040947 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.014061928 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.037632942 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.037801027 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.037870884 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.037949085 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.037993908 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.038028955 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.038044930 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.041537046 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.041588068 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.041837931 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.042108059 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.042128086 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.074567080 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.074702024 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.074776888 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.075047016 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.075047016 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.075066090 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.075076103 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.081948042 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.081990004 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.082077980 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.082367897 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.082379103 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.661958933 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.662472010 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.662539005 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.662935019 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.662967920 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.678077936 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.678441048 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.678456068 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.678898096 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.678905010 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.757024050 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.757544994 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.757560015 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.758210897 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.758217096 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.793333054 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.793710947 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.793843985 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.795937061 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.795989990 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.796021938 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.796037912 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.810503006 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.810597897 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.810636044 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.814790964 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.823101997 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.823123932 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.828059912 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.828068972 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.861569881 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.861592054 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.894489050 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.894711971 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.894949913 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.896500111 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.896552086 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.896714926 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.896994114 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.896994114 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.897006989 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.897013903 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.900120974 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.900136948 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.902398109 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.902496099 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.902580023 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.905328035 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.905368090 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.905817032 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.905852079 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.907797098 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.908045053 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.908061028 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.963527918 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.963840008 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.963902950 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.964221954 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.964242935 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.964263916 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.964271069 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.969101906 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.969163895 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:00.969300032 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.970340014 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:00.970371008 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.640440941 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.641541004 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.641566992 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.642594099 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.642611027 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.658186913 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.658986092 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.659007072 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.660132885 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.660140038 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.690725088 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.691521883 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.691546917 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.692365885 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.692372084 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.717374086 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.717885971 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.717926025 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.718475103 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.718491077 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.772123098 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.772280931 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.772380114 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.772419930 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.772438049 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.772450924 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.772458076 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.775177002 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.775219917 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.775330067 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.775522947 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.775543928 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.790658951 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.791729927 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.791800022 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.791835070 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.791851997 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.791879892 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.791887045 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.794130087 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.794173956 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.794373035 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.794564009 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.794584036 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.813090086 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.813474894 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.813498974 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.813869953 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.813874960 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.822876930 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.823086977 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.823139906 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.823218107 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.823219061 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.823242903 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.823251963 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.825552940 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.825598955 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.825701952 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.825798035 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.825813055 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.850754023 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.850807905 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.850882053 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.850935936 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.850950003 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.850960970 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.850965023 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.852890968 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.852946043 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.853041887 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.853235006 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.853252888 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.954039097 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.954231024 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.954468966 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.954638004 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.954657078 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.954668045 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.954673052 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.959292889 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.959351063 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:01.959434032 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.959661961 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:01.959680080 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.161457062 CET	49824	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:30:02.161515951 CET	443	49824	142.250.185.228	192.168.2.4
Oct 30, 2024 16:30:02.161676884 CET	49824	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:30:02.161937952 CET	49824	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:30:02.161955118 CET	443	49824	142.250.185.228	192.168.2.4
Oct 30, 2024 16:30:02.510190010 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.511168957 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.511198044 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.511699915 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.511703968 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.517987013 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.518513918 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.518543005 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.519529104 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.519536018 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.568223953 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.569113016 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.569152117 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.570483923 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.570491076 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.591507912 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.592039108 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.592057943 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.592710018 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.592715979 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.641088963 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.641345024 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.641419888 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.644433022 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.644447088 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.647130013 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.647761106 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.647809029 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.649719954 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.649758101 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.649823904 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.649861097 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.649878025 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.649899006 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.649904966 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.651643991 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.651659012 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.654442072 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.654479027 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.654539108 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.655014038 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.655024052 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.691289902 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.691716909 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.691731930 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.692395926 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.692400932 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.699641943 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.699764013 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.699815989 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.699944973 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.699954987 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.699978113 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.699982882 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.703788042 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.703814983 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.703949928 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.704063892 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.704077959 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.723062992 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.723145962 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.723187923 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.723272085 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.723277092 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.723287106 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.723290920 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.727116108 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.727144957 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.727375984 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.727533102 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.727545023 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.821860075 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.822033882 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.822129011 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.822386980 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.822396040 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.825587034 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.825614929 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:02.825762033 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.825880051 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:02.825897932 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.021688938 CET	443	49824	142.250.185.228	192.168.2.4
Oct 30, 2024 16:30:03.022099972 CET	49824	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:30:03.022128105 CET	443	49824	142.250.185.228	192.168.2.4
Oct 30, 2024 16:30:03.022473097 CET	443	49824	142.250.185.228	192.168.2.4
Oct 30, 2024 16:30:03.023377895 CET	49824	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:30:03.023444891 CET	443	49824	142.250.185.228	192.168.2.4
Oct 30, 2024 16:30:03.075406075 CET	49824	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:30:03.384529114 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.384818077 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.385047913 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.385066986 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.385243893 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.385305882 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.385685921 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.385699987 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.385888100 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.385891914 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.514278889 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.514678001 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.515033960 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.515098095 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.515158892 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.515192986 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.515207052 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.515213013 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.515223980 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.515229940 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.515657902 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.515676975 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.518430948 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.518465996 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.518558025 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.518733025 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.518740892 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.542690992 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.543127060 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.543144941 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.543628931 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.543633938 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.554409981 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.554625988 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.554713011 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.554749966 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.554761887 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.554784060 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.554790974 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.555805922 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.556135893 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.556157112 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.556534052 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.556538105 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.557606936 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.557627916 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.557893038 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.558007956 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.558017969 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.657855988 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.657953978 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.658047915 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.658287048 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.658287048 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.658329964 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.658358097 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.663530111 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.663582087 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.663722992 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.664128065 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.664143085 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.681258917 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.681468010 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.681536913 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.681592941 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.681615114 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.681627989 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.681632996 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.685638905 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.685673952 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.685892105 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.686099052 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.686114073 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.687741995 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.687906027 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.687963963 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.688582897 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.688596010 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.688626051 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.688632965 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.694610119 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.694653988 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:03.694736004 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.694914103 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:03.694927931 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.254040956 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.254537106 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.254549980 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.254968882 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.254972935 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.304969072 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.305394888 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.305408001 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.305843115 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.305847883 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.402333021 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.402573109 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.402625084 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.402692080 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.402707100 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.402717113 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.402721882 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.405275106 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.405312061 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.405390978 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.405584097 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.405600071 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.409287930 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.409691095 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.409699917 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.410157919 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.410162926 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.410805941 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.411190987 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.411221981 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.411529064 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.411535025 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.438301086 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.438325882 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.438502073 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.438510895 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.438584089 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.438587904 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.438606977 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.438620090 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.438628912 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.440934896 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.440969944 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.441210032 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.441343069 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.441358089 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.443830967 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.444165945 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.444175959 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.444622040 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.444627047 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.544106007 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.544181108 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.544347048 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.544450045 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.544465065 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.547229052 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.547306061 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.547393084 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.547573090 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.547609091 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.574841976 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.574862957 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.574959040 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.574968100 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.574978113 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.575033903 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.575150013 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.575160980 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.575170994 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.575176001 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.577373028 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.577387094 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.577486992 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.577600956 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.577613115 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.666357994 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.666459084 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.666543007 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.666661024 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.666677952 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.666691065 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.666696072 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.669344902 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.669388056 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:04.669472933 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.669691086 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:04.669712067 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.140619993 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.141135931 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.141177893 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.141565084 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.141572952 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.210640907 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.211092949 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.211111069 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.211488008 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.211492062 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.272658110 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.272716045 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.272773981 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.272773027 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.272825003 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.273040056 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.273067951 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.273081064 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.273087025 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.275619984 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.275641918 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.275718927 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.275902987 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.275918007 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.283545017 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.283927917 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.283962011 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.284321070 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.284328938 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.307945967 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.308361053 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.308387995 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.308778048 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.308782101 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.350548029 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.350570917 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.350636959 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.350645065 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.350688934 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.350778103 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.350918055 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.350929976 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.350939989 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.350944996 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.353671074 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.353723049 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.353835106 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.354038000 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.354060888 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.414417982 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.414474964 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.414551020 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.414793015 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.414793015 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.414830923 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.414853096 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.417324066 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.417357922 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.417449951 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.417680025 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.417695045 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.439786911 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.439860106 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.439909935 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.440033913 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.440041065 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.440063000 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.440067053 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.442275047 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.442327976 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.442586899 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.442754030 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.442774057 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.706799984 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.707657099 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.707698107 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.712178946 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.712187052 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.837395906 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.837506056 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.837735891 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.837735891 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.837882996 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.837903023 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.840595961 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.840621948 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:05.840781927 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.840946913 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:05.840965986 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.042593956 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.043108940 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.043135881 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.043601990 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.043606997 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.109769106 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.110440016 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.110476017 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.111001968 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.111025095 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.190474987 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.190536976 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.190778017 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.190778017 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.191801071 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.191817999 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.193279982 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.193315983 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.193461895 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.193523884 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.193531990 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.219997883 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.220810890 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.220810890 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.220840931 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.220859051 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.227833033 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.228132010 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.228142977 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.228449106 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.228454113 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.240140915 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.241202116 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.241297960 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.241336107 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.241336107 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.241355896 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.241365910 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.243494034 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.243558884 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.243748903 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.243750095 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.243838072 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.356163979 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.356230974 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.356388092 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.356460094 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.356460094 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.356468916 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.356477022 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.357804060 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.357942104 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.359060049 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.359074116 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.359131098 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.359194040 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.359198093 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.359215975 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.359245062 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.359252930 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.359478951 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.359491110 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.361397982 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.361459970 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.361630917 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.361727953 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.361747026 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.579346895 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.579999924 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.580029011 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.580260992 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.580269098 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.709945917 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.710016012 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.710254908 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.710419893 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.710419893 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.710459948 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.710484028 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.714447975 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.714494944 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.714669943 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.714987040 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.715003014 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.921437025 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.922019958 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.922045946 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.922472000 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.922477961 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.991224051 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.991808891 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.991861105 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:06.992263079 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:06.992276907 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.056941986 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.057002068 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.057074070 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.057320118 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.057334900 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.057344913 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.057352066 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.060275078 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.060318947 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.060393095 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.060583115 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.060604095 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.104728937 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.105212927 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.105226994 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.105926037 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.105930090 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.109633923 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.110608101 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.110629082 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.114135027 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.114147902 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.122035980 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.122102022 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.122168064 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.122404099 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.122437000 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.122472048 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.122488022 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.125144958 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.125196934 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.125345945 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.125535965 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.125554085 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.236139059 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.236170053 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.236212015 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.236221075 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.236270905 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.236519098 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.236532927 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.236543894 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.236548901 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.238918066 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.238951921 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.239065886 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.239259958 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.239275932 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.446822882 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.446912050 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.447119951 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.447324038 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.447336912 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.447355032 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.447361946 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.451598883 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.451642036 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.451867104 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.452095985 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.452105999 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.459100962 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.459644079 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.459661007 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.460371017 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.460376978 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.591806889 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.591837883 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.591883898 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.591967106 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.592175961 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.592175961 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.592191935 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.592207909 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.595024109 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.595066071 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.595149994 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.595335007 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.595347881 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.803491116 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.804061890 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.804107904 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.804563999 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.804573059 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.868942022 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.869667053 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.869680882 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.869918108 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.869930983 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.935813904 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.935883999 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.936116934 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.936161041 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.936161041 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.936182976 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.936187983 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.938893080 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.938925982 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.939438105 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.939438105 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.939467907 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.986277103 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.987268925 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.987268925 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:07.987294912 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:07.987320900 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.000082970 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.000169039 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.000271082 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.000400066 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.000400066 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.000416994 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.000427961 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.003266096 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.003309011 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.003438950 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.003593922 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.003606081 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.119134903 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.119199038 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.119563103 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.119563103 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.119652033 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.119666100 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.133666039 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.133692980 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.137902975 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.141666889 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.141685963 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.182781935 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.183831930 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.183831930 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.183861971 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.183881998 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.314088106 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.314177990 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.314301014 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.314416885 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.314416885 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.314490080 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.314491034 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.314517021 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.314527988 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.317586899 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.317611933 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.317864895 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.317864895 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.317888975 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.330547094 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.331439972 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.331439972 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.331456900 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.331485033 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.461707115 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.461802006 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.461913109 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.462198973 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.462199926 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.462220907 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.462234020 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.465090036 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.465112925 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.465281010 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.465413094 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.465425968 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.679326057 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.679845095 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.679857969 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.680433989 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.680438995 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.762487888 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.763051033 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.763067961 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.763485909 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.763490915 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.810545921 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.810791969 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.810849905 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.810888052 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.810899973 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.810910940 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.810915947 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.813708067 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.813750982 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.813822031 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.813990116 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.813997984 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.874950886 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.875454903 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.875497103 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.875919104 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.875925064 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.895461082 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.895535946 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.895699978 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.895740032 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.895759106 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.895775080 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.895781040 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.898441076 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.898488998 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:08.898550987 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.898698092 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:08.898715019 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.007277012 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.007304907 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.007369995 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.007389069 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.007580042 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.007601023 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.007621050 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.007635117 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.007642984 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.007657051 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.007663012 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.010937929 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.010970116 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.011032104 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.011195898 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.011208057 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.064858913 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.065260887 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.065279007 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.065730095 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.065737009 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.204869986 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.205379963 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.205414057 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.205826044 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.205832958 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.206116915 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.206274986 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.206414938 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.206465960 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.206480980 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.206490993 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.206496954 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.209270954 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.209343910 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.209472895 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.209634066 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.209652901 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.337193012 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.337219000 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.337282896 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.337285042 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.337516069 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.337608099 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.337621927 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.337632895 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.337639093 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.340312004 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.340349913 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.340711117 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.341028929 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.341048002 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.537098885 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.537623882 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.537638903 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.538115025 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.538120031 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.631350994 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.631863117 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.631937981 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.632298946 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.632314920 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.714270115 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.714387894 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.714624882 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.714624882 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.714751005 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.714766979 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.717936993 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.717971087 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.718147039 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.718190908 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.718198061 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.758721113 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.759634018 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.759634018 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.759670019 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.759684086 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.762697935 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.762763977 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.762926102 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.763221979 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.763257980 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.763294935 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.763325930 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.765999079 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.766035080 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.766182899 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.766357899 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.766385078 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.890974045 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.891098022 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.891273975 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.891273975 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.891424894 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.891443014 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.894167900 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.894228935 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.894407988 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.894514084 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.894536018 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.951581955 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.952512980 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.952512980 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:09.952531099 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:09.952548027 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.084496975 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.085423946 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.085423946 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.085458994 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.085474968 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.090076923 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.090118885 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.090179920 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.090213060 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.090259075 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.090958118 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.090958118 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.090974092 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.090985060 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.094172001 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.094218969 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.094379902 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.094530106 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.094547033 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.216463089 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.216635942 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.217586994 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.218018055 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.218018055 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.218033075 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.218043089 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.225162029 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.225198984 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.225742102 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.226000071 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.226016998 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.457953930 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.458570957 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.458611012 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.459554911 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.459564924 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.505547047 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.517671108 CET	49870	443	192.168.2.4	40.99.149.130
Oct 30, 2024 16:30:10.517728090 CET	443	49870	40.99.149.130	192.168.2.4
Oct 30, 2024 16:30:10.517829895 CET	49870	443	192.168.2.4	40.99.149.130
Oct 30, 2024 16:30:10.518213987 CET	49870	443	192.168.2.4	40.99.149.130
Oct 30, 2024 16:30:10.518228054 CET	443	49870	40.99.149.130	192.168.2.4
Oct 30, 2024 16:30:10.523354053 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.523359060 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:30:10.523370981 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.523389101 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:30:10.524070024 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.524075031 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.589982986 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.590068102 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.590210915 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.597919941 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.597919941 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.597954035 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.597970009 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.612215042 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.612246990 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.612374067 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.614231110 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.614240885 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.636288881 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.636985064 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.637018919 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.637794018 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.637804985 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.653084040 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.653765917 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.653845072 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.657825947 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.657847881 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.657860994 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.657872915 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.665344000 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.665431023 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.665505886 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.665765047 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.665791035 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.768898010 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.768925905 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.768974066 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.769078016 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.769242048 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.769242048 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.769284010 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.769311905 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.771697998 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.771733046 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.771811962 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.771943092 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.771953106 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.815088987 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:30:10.830374956 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.866293907 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:30:10.880345106 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.944430113 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:30:10.944493055 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:30:10.944627047 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:30:10.996582985 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.996618986 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:10.997380018 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:10.997392893 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.010938883 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:30:11.011001110 CET	443	49746	40.99.157.50	192.168.2.4
Oct 30, 2024 16:30:11.011044025 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:30:11.011080980 CET	49746	443	192.168.2.4	40.99.157.50
Oct 30, 2024 16:30:11.028919935 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.048764944 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.048794985 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.055516958 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.055524111 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.123969078 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.124044895 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.124135971 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.125327110 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.125351906 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.125365973 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.125372887 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.128056049 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.128101110 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.128257036 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.128393888 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.128412008 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.340081930 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.340295076 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.340368986 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.340434074 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.340456009 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.340467930 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.340473890 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.343831062 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.343871117 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.343939066 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.344096899 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.344110966 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.400907040 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.401274920 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.401309013 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.401777983 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.401784897 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.518615961 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.519087076 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.519123077 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.519644976 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.519653082 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.534843922 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.534908056 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.535012960 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.535073042 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.535154104 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.535176992 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.535192966 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.535201073 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.537765026 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.537800074 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.537935972 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.538070917 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.538080931 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.639533043 CET	443	49870	40.99.149.130	192.168.2.4
Oct 30, 2024 16:30:11.639846087 CET	49870	443	192.168.2.4	40.99.149.130
Oct 30, 2024 16:30:11.639863014 CET	443	49870	40.99.149.130	192.168.2.4
Oct 30, 2024 16:30:11.640341997 CET	443	49870	40.99.149.130	192.168.2.4
Oct 30, 2024 16:30:11.640820026 CET	49870	443	192.168.2.4	40.99.149.130
Oct 30, 2024 16:30:11.640892029 CET	443	49870	40.99.149.130	192.168.2.4
Oct 30, 2024 16:30:11.651232958 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.651384115 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.651542902 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.651581049 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.651601076 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.651612043 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.651619911 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.654476881 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.654522896 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.654587984 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.654714108 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.654727936 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.662511110 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.662894964 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.662916899 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.663324118 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.663328886 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.684750080 CET	49870	443	192.168.2.4	40.99.149.130
Oct 30, 2024 16:30:11.794136047 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.794208050 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.794255972 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.794481993 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.794495106 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.794517994 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.794523001 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.797332048 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.797353029 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.797425032 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.797557116 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.797566891 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.870388985 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.870771885 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.870811939 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:11.871191025 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:11.871200085 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.000672102 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.000754118 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.001003027 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.001090050 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.001111984 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.001126051 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.001132965 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.003983974 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.004034042 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.004117012 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.004425049 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.004442930 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.120651960 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.121228933 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.121306896 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.121675968 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.121690989 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.257770061 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.257966042 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.258027077 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.258321047 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.258352995 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.258388042 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.258403063 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.266093969 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.266128063 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.266196012 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.270544052 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.270558119 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.278548956 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.279218912 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.279247046 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.279709101 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.279716015 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.386008024 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.386548042 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.386590958 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.387006998 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.387015104 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.408237934 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.408267021 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.408319950 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.408344030 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.408360958 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.408406973 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.408710003 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.408737898 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.408755064 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.408765078 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.411362886 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.411403894 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.411459923 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.411622047 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.411636114 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.531126976 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.531192064 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.531331062 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.531447887 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.537451982 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.537465096 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.537475109 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.537480116 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.540657043 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.540673018 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.542140961 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.542146921 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.544859886 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.544876099 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.545041084 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.545454025 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.545464993 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.671468019 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.671497107 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.671542883 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.671550035 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.671591043 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.673429966 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.673440933 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.673465014 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.673470974 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.681108952 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.681144953 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.681222916 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.681437016 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.681446075 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.765577078 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.766298056 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.766314030 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.767266989 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.767271042 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.900823116 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.900893927 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.900962114 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.901216030 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.901227951 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.908044100 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.908083916 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:12.908194065 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.908756018 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:12.908773899 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.004861116 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.005896091 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.005909920 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.006966114 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.006972075 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.012568951 CET	443	49824	142.250.185.228	192.168.2.4
Oct 30, 2024 16:30:13.012629986 CET	443	49824	142.250.185.228	192.168.2.4
Oct 30, 2024 16:30:13.012854099 CET	49824	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:30:13.137906075 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.138405085 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.138444901 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.138627052 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.138690948 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.138766050 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.138787031 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.138827085 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.138876915 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.139844894 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.139851093 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.140264988 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.140274048 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.144037962 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.144077063 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.144268036 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.144407988 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.144423008 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.268436909 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.268587112 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.268722057 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.269140959 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.269165039 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.274182081 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.274223089 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.274301052 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.274629116 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.274646044 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.275039911 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.276134968 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.276154041 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.276815891 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.276822090 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.408299923 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.408324957 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.408366919 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.408389091 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.408428907 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.408732891 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.408744097 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.412683010 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.412717104 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.413129091 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.413391113 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.413405895 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.426419973 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.427395105 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.427409887 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.428632021 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.428642988 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.560580015 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.560655117 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.560753107 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.561007977 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.561021090 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.561038971 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.561043978 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.563860893 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.563905001 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.563970089 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.564110994 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.564129114 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.631274939 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.631727934 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.631804943 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.632153034 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.632184029 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.766603947 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.766637087 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.766685009 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.766854048 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.766937971 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.766982079 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.766999006 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.767014980 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.769756079 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.769818068 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.769913912 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.770071983 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.770098925 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.833796978 CET	49824	443	192.168.2.4	142.250.185.228
Oct 30, 2024 16:30:13.833817959 CET	443	49824	142.250.185.228	192.168.2.4
Oct 30, 2024 16:30:13.889628887 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.890410900 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.890422106 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:13.891597986 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:13.891602993 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.018837929 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.018927097 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.019145012 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.019433022 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.019450903 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.019462109 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.019467115 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.022912979 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.022962093 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.023050070 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.023614883 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.023628950 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.024971008 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.025861979 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.025922060 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.027679920 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.027697086 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.145011902 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.145628929 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.145651102 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.146559000 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.146567106 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.156116009 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.156266928 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.156394005 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.156589031 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.156634092 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.156665087 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.156682014 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.161468983 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.161500931 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.161667109 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.161889076 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.161900997 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.277596951 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.277650118 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.277762890 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.277972937 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.277988911 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.285149097 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.285190105 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.285270929 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.285799026 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.285815954 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.288348913 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.288804054 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.288836002 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.289213896 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.289221048 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.416594982 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.417144060 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.417195082 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.417201996 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.417269945 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.418219090 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.418239117 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.418257952 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.418263912 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.425261974 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.425302029 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.425458908 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.426435947 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.426448107 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.515757084 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.516263962 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.516288042 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.516974926 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.516979933 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.656789064 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.656862974 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.656940937 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.664566994 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.664582014 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.664594889 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.664598942 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.679521084 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.679563999 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.679629087 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.684745073 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.684760094 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.751158953 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.758575916 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.758595943 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.760382891 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.760391951 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.885617971 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.885848045 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.885916948 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.885951996 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.886013031 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.886070967 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.886086941 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.886123896 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.886132956 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.888449907 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.888492107 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.888586998 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.888740063 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.888755083 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.914093971 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.914463043 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.914485931 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:14.914937019 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:14.914942026 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.021181107 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.021866083 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.021883965 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.022460938 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.022465944 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.046359062 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.046428919 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.046578884 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.046689987 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.046730995 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.046773911 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.046789885 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.051475048 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.051522970 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.051618099 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.051747084 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.051764965 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.150273085 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.150347948 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.150525093 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.150612116 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.150626898 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.150636911 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.150643110 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.153172970 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.153244019 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.153312922 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.153465033 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.153496027 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.162564993 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.162931919 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.162955999 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.163366079 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.163378000 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.293200970 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.293277979 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.293386936 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.293628931 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.293647051 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.293673038 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.293678999 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.296396017 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.296447992 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.296580076 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.296818018 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.296837091 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.415766954 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.416311979 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.416354895 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.416811943 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.416816950 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.547671080 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.547707081 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.547754049 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.547808886 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.548979044 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.548995018 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.549006939 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.549011946 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.557702065 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.557744026 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.557975054 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.558195114 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.558213949 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.630708933 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.631836891 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.631858110 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.632850885 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.632864952 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.760427952 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.760504007 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.760560989 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.760910988 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.760932922 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.760945082 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.760951042 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.765022993 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.765114069 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.765202045 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.765398026 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.765429974 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.789916992 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.790570021 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.790616989 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.791162968 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.791172981 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.898299932 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.911123991 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.911138058 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.912204027 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.912211895 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.920176983 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.920244932 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.920303106 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.920306921 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.920556068 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.926637888 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.926659107 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:15.926676989 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:15.926685095 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.004151106 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.004185915 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.004538059 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.035470009 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.040220022 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.040288925 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.040350914 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.065596104 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.065613031 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.067755938 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.067792892 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.069261074 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.069268942 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.069766998 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.069766998 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.069807053 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.069834948 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.197619915 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.197715044 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.197856903 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.199563026 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.199645996 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.199744940 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.203888893 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.203912020 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.203926086 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.203933001 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.206886053 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.206918955 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.263710022 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.263752937 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.263926029 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.264312983 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.264323950 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.294995070 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.295465946 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.295491934 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.295969963 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.295985937 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.429301023 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.429372072 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.429423094 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.429673910 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.429701090 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.429717064 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.429723978 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.432588100 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.432636023 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.432751894 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.432938099 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.432955980 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.505801916 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.506299019 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.506340981 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.506783962 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.506791115 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.636310101 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.636382103 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.636571884 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.636679888 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.636679888 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.636718988 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.636745930 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.639863014 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.639910936 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.640018940 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.640295029 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.640311956 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.814923048 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.815462112 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.815485954 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.815788984 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.815794945 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.948498964 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.948642969 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.948712111 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.948873997 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.948893070 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.948904037 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.948909998 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.951855898 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.951894045 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.951961994 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.952214956 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.952230930 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.986946106 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.987395048 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.987413883 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:16.987835884 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:16.987844944 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.001926899 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.002403975 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.002419949 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.002871037 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.002875090 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.118499041 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.118966103 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.119035959 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.119095087 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.119132042 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.119173050 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.119190931 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.121803045 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.121849060 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.121926069 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.122078896 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.122097969 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.133955956 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.134021044 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.134064913 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.134190083 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.134210110 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.134223938 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.134231091 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.136822939 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.136861086 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.136996984 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.137155056 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.137170076 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.184181929 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.184604883 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.184617043 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.185102940 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.185106993 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.318264008 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.318295956 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.318337917 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.318353891 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.318401098 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.318600893 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.318615913 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.318627119 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.318631887 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.321444035 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.321513891 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.321578979 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.321810961 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.321844101 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.377331018 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.377779007 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.377815008 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.378246069 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.378252983 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.511198044 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.511265039 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.511358023 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.511687040 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.511713028 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.511735916 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.511744022 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.515192986 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.515239954 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:17.515341043 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.515546083 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:17.515564919 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.716479063 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.716953993 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.716996908 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.717401028 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.717417002 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.718442917 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.718764067 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.718837976 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.719106913 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.719122887 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.719172001 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.719422102 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.719434977 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.719738960 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.719743967 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.721544027 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.721575975 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.721858025 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.721870899 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.722171068 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.722186089 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.722249031 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.722253084 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.722666979 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.722671986 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.845429897 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.845597029 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.845690966 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.845841885 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.845865011 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.845879078 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.845885992 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.848200083 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.848217964 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.848258018 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.848324060 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.848324060 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.848443031 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.848463058 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.848473072 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.848479033 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.848711014 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.848819971 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.848856926 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.848880053 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.848929882 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.849052906 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.849052906 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.849090099 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.849113941 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.850904942 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.850958109 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.851006985 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.851006985 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.851047039 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.851219893 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.851267099 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.851357937 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.851680040 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.851706028 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.851975918 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.851990938 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.852022886 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.852029085 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.852145910 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.852190971 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.852258921 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.852497101 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.852511883 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.853890896 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.853986025 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.854350090 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.854785919 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.854820013 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.855057955 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.855179071 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.855271101 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.855514050 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.855526924 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.855623960 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.855654955 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.855679989 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.855695009 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.855700016 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.855976105 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.855988026 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.859744072 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.859769106 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:18.859841108 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.859980106 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:18.860004902 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.585274935 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.585355043 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.585829020 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.585870981 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.585874081 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.585915089 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.586373091 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.586404085 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.586596012 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.586602926 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.588522911 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.588841915 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.588850021 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.589234114 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.589238882 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.593033075 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.593328953 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.593373060 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.593698025 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.593708038 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.714977980 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.715039968 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.715292931 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.715292931 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.715354919 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.715359926 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.715377092 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.715395927 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.715439081 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.715464115 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.715595961 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.715595961 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.715621948 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.715636969 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.717303991 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.717355967 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.717490911 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.717526913 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.717622042 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.717750072 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.717756033 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.717783928 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.717791080 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.718246937 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.718291044 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.718497992 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.718930960 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.718944073 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.718970060 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.718997955 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.719137907 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.719137907 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.719165087 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.719958067 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.719968081 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.720124006 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.720124006 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.720144033 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.724553108 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.724606037 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.724812031 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.724812031 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.724888086 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.724916935 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.726785898 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.726814985 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.726953030 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.727008104 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.727015018 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.809919119 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.810858965 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.810908079 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.811558962 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.811573029 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.939894915 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.939917088 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.939954996 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.939997911 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.940092087 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.940288067 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.940289021 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.940350056 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.940377951 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.943011045 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.943056107 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:19.943165064 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.943257093 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:19.943265915 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.445650101 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.446585894 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.446585894 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.446620941 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.446630955 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.455024004 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.455739975 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.455769062 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.456068039 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.456073046 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.466460943 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.466891050 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.466906071 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.467195034 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.467199087 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.503633022 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.504018068 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.504029036 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.504420042 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.504424095 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.573985100 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.574045897 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.574134111 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.574150085 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.574225903 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.574325085 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.574325085 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.574340105 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.574348927 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.579803944 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.579844952 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.580003023 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.580152988 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.580168962 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.592524052 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.592714071 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.592813969 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.592849970 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.592849970 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.592860937 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.592869043 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.594990015 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.595020056 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.595158100 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.595330000 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.595338106 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.599559069 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.599628925 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.599759102 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.599796057 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.599796057 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.599802017 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.599809885 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.601774931 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.601793051 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.601926088 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.601984024 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.601998091 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.642621040 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.642687082 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.642775059 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.642932892 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.642937899 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.642963886 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.642967939 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.645729065 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.645761013 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.645828962 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.646043062 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.646061897 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.685385942 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.686264038 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.686264038 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.686281919 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.686296940 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.817873001 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.817900896 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.817951918 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.817982912 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.818181992 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.818207979 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.818219900 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.818250895 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.818257093 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.821116924 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.821176052 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:20.821381092 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.821381092 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:20.821455002 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:21.317913055 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:21.318901062 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:21.318901062 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:21.318936110 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:21.318958044 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:21.322171926 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:21.322922945 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:21.322922945 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:21.322936058 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:21.322947025 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:21.334964037 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:21.335366964 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:21.335380077 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 16:30:21.335870028 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 16:30:21.335875988 CET	443	49923	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 16:28:57.165252924 CET	53	64538	1.1.1.1	192.168.2.4
Oct 30, 2024 16:28:57.167809010 CET	53	63704	1.1.1.1	192.168.2.4
Oct 30, 2024 16:28:58.450558901 CET	51937	53	192.168.2.4	1.1.1.1
Oct 30, 2024 16:28:58.450901031 CET	60508	53	192.168.2.4	1.1.1.1
Oct 30, 2024 16:28:58.458688021 CET	53	51937	1.1.1.1	192.168.2.4
Oct 30, 2024 16:28:58.459383965 CET	53	60508	1.1.1.1	192.168.2.4
Oct 30, 2024 16:28:58.654582024 CET	53	60776	1.1.1.1	192.168.2.4
Oct 30, 2024 16:28:59.327131987 CET	55665	53	192.168.2.4	1.1.1.1
Oct 30, 2024 16:28:59.327260017 CET	60884	53	192.168.2.4	1.1.1.1
Oct 30, 2024 16:28:59.335181952 CET	53	55665	1.1.1.1	192.168.2.4
Oct 30, 2024 16:28:59.335520983 CET	53	60884	1.1.1.1	192.168.2.4
Oct 30, 2024 16:29:01.934165955 CET	53647	53	192.168.2.4	1.1.1.1
Oct 30, 2024 16:29:01.934627056 CET	62984	53	192.168.2.4	1.1.1.1
Oct 30, 2024 16:29:01.941505909 CET	53	53647	1.1.1.1	192.168.2.4
Oct 30, 2024 16:29:01.945327044 CET	53	62984	1.1.1.1	192.168.2.4
Oct 30, 2024 16:29:10.978723049 CET	138	138	192.168.2.4	192.168.2.255
Oct 30, 2024 16:29:16.030494928 CET	53	60780	1.1.1.1	192.168.2.4
Oct 30, 2024 16:29:34.915019989 CET	53	58250	1.1.1.1	192.168.2.4
Oct 30, 2024 16:29:57.039555073 CET	53	54343	1.1.1.1	192.168.2.4
Oct 30, 2024 16:29:57.630866051 CET	53	64265	1.1.1.1	192.168.2.4
Oct 30, 2024 16:30:10.490097046 CET	60567	53	192.168.2.4	1.1.1.1
Oct 30, 2024 16:30:10.490097046 CET	56228	53	192.168.2.4	1.1.1.1
Oct 30, 2024 16:30:10.499094963 CET	53	56228	1.1.1.1	192.168.2.4
Oct 30, 2024 16:30:10.499672890 CET	53	60567	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 16:28:58.450558901 CET	192.168.2.4	1.1.1.1	0x85c6	Standard query (0)	outlook.live.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:58.450901031 CET	192.168.2.4	1.1.1.1	0xe787	Standard query (0)	outlook.live.com	65	IN (0x0001)	false
Oct 30, 2024 16:28:59.327131987 CET	192.168.2.4	1.1.1.1	0xa7f7	Standard query (0)	outlook.live.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:59.327260017 CET	192.168.2.4	1.1.1.1	0x2604	Standard query (0)	outlook.live.com	65	IN (0x0001)	false
Oct 30, 2024 16:29:01.934165955 CET	192.168.2.4	1.1.1.1	0x72ad	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:29:01.934627056 CET	192.168.2.4	1.1.1.1	0x1aba	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 16:30:10.490097046 CET	192.168.2.4	1.1.1.1	0xd8a	Standard query (0)	outlook.live.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:30:10.490097046 CET	192.168.2.4	1.1.1.1	0x9e3e	Standard query (0)	outlook.live.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 16:28:58.458688021 CET	1.1.1.1	192.168.2.4	0x85c6	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:28:58.458688021 CET	1.1.1.1	192.168.2.4	0x85c6	No error (0)	olc-g2.tm-4.office.com		40.99.150.50	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:58.458688021 CET	1.1.1.1	192.168.2.4	0x85c6	No error (0)	olc-g2.tm-4.office.com		52.98.243.50	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:58.458688021 CET	1.1.1.1	192.168.2.4	0x85c6	No error (0)	olc-g2.tm-4.office.com		40.99.150.34	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:58.458688021 CET	1.1.1.1	192.168.2.4	0x85c6	No error (0)	olc-g2.tm-4.office.com		40.99.150.114	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:58.458688021 CET	1.1.1.1	192.168.2.4	0x85c6	No error (0)	olc-g2.tm-4.office.com		52.98.242.242	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:58.458688021 CET	1.1.1.1	192.168.2.4	0x85c6	No error (0)	olc-g2.tm-4.office.com		52.98.243.34	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:58.458688021 CET	1.1.1.1	192.168.2.4	0x85c6	No error (0)	olc-g2.tm-4.office.com		52.98.243.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:58.458688021 CET	1.1.1.1	192.168.2.4	0x85c6	No error (0)	olc-g2.tm-4.office.com		52.98.152.194	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:58.459383965 CET	1.1.1.1	192.168.2.4	0xe787	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:28:59.335181952 CET	1.1.1.1	192.168.2.4	0xa7f7	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:28:59.335181952 CET	1.1.1.1	192.168.2.4	0xa7f7	No error (0)	olc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:28:59.335181952 CET	1.1.1.1	192.168.2.4	0xa7f7	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:28:59.335181952 CET	1.1.1.1	192.168.2.4	0xa7f7	No error (0)	FRA-efz.ms-acdc.office.com		40.99.157.50	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:59.335181952 CET	1.1.1.1	192.168.2.4	0xa7f7	No error (0)	FRA-efz.ms-acdc.office.com		52.98.179.130	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:59.335181952 CET	1.1.1.1	192.168.2.4	0xa7f7	No error (0)	FRA-efz.ms-acdc.office.com		52.97.188.66	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:28:59.335520983 CET	1.1.1.1	192.168.2.4	0x2604	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:28:59.335520983 CET	1.1.1.1	192.168.2.4	0x2604	No error (0)	olc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:28:59.335520983 CET	1.1.1.1	192.168.2.4	0x2604	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:29:01.941505909 CET	1.1.1.1	192.168.2.4	0x72ad	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:29:01.945327044 CET	1.1.1.1	192.168.2.4	0x1aba	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 16:29:15.722489119 CET	1.1.1.1	192.168.2.4	0xba4d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:29:15.722489119 CET	1.1.1.1	192.168.2.4	0xba4d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:29:31.120805979 CET	1.1.1.1	192.168.2.4	0xaddf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:29:31.120805979 CET	1.1.1.1	192.168.2.4	0xaddf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:29:47.587536097 CET	1.1.1.1	192.168.2.4	0xaf5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:29:47.587536097 CET	1.1.1.1	192.168.2.4	0xaf5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:30:10.459512949 CET	1.1.1.1	192.168.2.4	0xb92b	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:30:10.459512949 CET	1.1.1.1	192.168.2.4	0xb92b	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:30:10.499094963 CET	1.1.1.1	192.168.2.4	0x9e3e	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:30:10.499672890 CET	1.1.1.1	192.168.2.4	0xd8a	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:30:10.499672890 CET	1.1.1.1	192.168.2.4	0xd8a	No error (0)	olc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:30:10.499672890 CET	1.1.1.1	192.168.2.4	0xd8a	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:30:10.499672890 CET	1.1.1.1	192.168.2.4	0xd8a	No error (0)	FRA-efz.ms-acdc.office.com		40.99.149.130	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:30:10.499672890 CET	1.1.1.1	192.168.2.4	0xd8a	No error (0)	FRA-efz.ms-acdc.office.com		40.99.157.18	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:30:10.499672890 CET	1.1.1.1	192.168.2.4	0xd8a	No error (0)	FRA-efz.ms-acdc.office.com		52.98.179.226	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

outlook.live.com

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	40.99.150.50	80	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 16:28:58.476378918 CET	593	OUT	GET /mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA= HTTP/1.1 Host: outlook.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 30, 2024 16:28:59.323854923 CET	663	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA= Server: Microsoft-IIS/10.0 request-id: 1c3b62b1-abc6-bc76-972d-6747e5002b6c X-FEServer: FR3P281CA0095 X-RequestId: 695c833a-e6ed-4f82-9ec0-c1f4046f2d37 X-FEProxyInfo: FR3P281CA0095.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN MS-CV: sWI7HMardryXLWdH5QArbA.0 X-Powered-By: ASP.NET X-FEServer: FR3P281CA0095 Date: Wed, 30 Oct 2024 15:28:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	40.99.150.50	80	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 16:29:43.466216087 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	40.99.157.50	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:00 UTC	821	OUT	GET /mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA= HTTP/1.1 Host: outlook.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:29:00 UTC	724	IN	HTTP/1.1 417 Server: Microsoft-IIS/10.0 request-id: d82e9363-faf6-9055-cb27-55d40d295262 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedBETarget: FRYP281MB3388.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 417 x-besku: UNKNOWN X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 417 X-FirstHopCafeEFZ: FRA X-BEPartition: Clique/CLDEUP281FRA01 X-FEProxyInfo: FR2P281CA0140.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA MS-CV: Y5Mu2Pb6VZDLJ1XUDSlSYg.1 X-Powered-By: ASP.NET X-FEServer: FR2P281CA0140 Date: Wed, 30 Oct 2024 15:29:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:02 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 15:29:03 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=4643 Date: Wed, 30 Oct 2024 15:29:02 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 15:29:04 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25990 Date: Wed, 30 Oct 2024 15:29:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 15:29:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	40.99.157.50	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:13 UTC	853	OUT	GET /mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA= HTTP/1.1 Host: outlook.live.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:29:13 UTC	920	IN	HTTP/1.1 417 Server: Microsoft-IIS/10.0 request-id: 69c19b41-b080-9202-d80b-cde9e8965c55 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedFETarget: BE1P281CU029.internal.outlook.com X-BackEndHttpStatus: 417 X-CalculatedBETarget: BEXP281MB0069.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 417 x-besku: UNKNOWN X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 417 X-BEPartition: Clique/CLDEUP281SXF00 X-FEProxyInfo: FR2P281CA0132.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA MS-CV: QZvBaYCwApLYC83p6JZcVQ.1.1 X-FEServer: BE1P281CA0408 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: FRA X-Powered-By: ASP.NET X-FEServer: FR2P281CA0132 Date: Wed, 30 Oct 2024 15:29:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:13 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=l1mPvGco5d1M2Vc&MD=+SWeUmr9 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 15:29:13 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 78ec587f-90bd-40b3-9871-9bbbbd68f346 MS-RequestId: 688c6406-37f5-41d6-af8e-f3b64a6254c5 MS-CV: B2kTdRNVC0Cfgsd0.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 15:29:12 GMT Connection: close Content-Length: 24490
2024-10-30 15:29:13 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-30 15:29:13 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:48 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:48 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:48 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152948Z-16849878b78wc6ln1zsrz6q9w800000007wg00000000e7hr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:48 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 15:29:48 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-30 15:29:48 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-30 15:29:48 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-30 15:29:49 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-30 15:29:49 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-30 15:29:49 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-30 15:29:49 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-30 15:29:49 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-30 15:29:49 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:50 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:50 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3be177bf-d01e-007a-546e-28f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152950Z-15b8d89586f5s5nz3ffrgxn5ac00000008z0000000005xwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:50 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:50 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:50 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152950Z-15b8d89586f8nxpt6ys645x5v000000009cg00000000ga53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:50 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:50 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:50 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152950Z-16849878b7867ttgfbpnfxt44s000000083g00000000bk0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:50 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:50 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:50 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: c3a6d21e-601e-00ab-1dc6-2766f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152950Z-r197bdfb6b4xfp4mncra29rqkc00000001kg00000000qz4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:50 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:50 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:50 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:50 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152950Z-16849878b78fkwcjkpn19c5dsn000000076g00000000ka4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:29:50 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:51 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152951Z-16849878b78qf2gleqhwczd21s0000000890000000010en3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:51 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:51 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152951Z-16849878b786lft2mu9uftf3y400000009b000000000wfgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:51 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:51 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:51 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 8abc48b9-201e-0096-2f4f-28ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152951Z-15b8d89586fhl2qtatrz3vfkf00000000em0000000002ee9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:51 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:51 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:51 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152951Z-16849878b78fkwcjkpn19c5dsn000000077g00000000fhhv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:51 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:51 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:51 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 0d0c59f1-101e-005a-526a-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152951Z-17c5cb586f6z6tq2xr35mhd5x000000000qg00000000pb5m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:51 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:52 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:52 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:52 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8384fc49-f01e-00aa-06d4-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152952Z-17c5cb586f6z6tq2xr35mhd5x000000000qg00000000pb6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:29:52 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:52 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:52 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:52 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152952Z-16849878b785dznd7xpawq9gcn00000009fg00000000wxcx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:52 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152952Z-16849878b78qwx7pmw9x5fub1c00000006d0000000008dk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:52 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:52 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152952Z-16849878b78g2m84h2v9sta290000000072000000000qww1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:52 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:52 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:52 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 226d2935-b01e-001e-729c-270214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152952Z-r197bdfb6b4hsj5bywyqk9r2xw00000009u0000000003bxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49768	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:52 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=l1mPvGco5d1M2Vc&MD=+SWeUmr9 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 15:29:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 101711dd-411d-4a39-940f-a67bf1b91652 MS-RequestId: 8be5449f-8d29-4472-8c2f-b3f90a0427be MS-CV: TLGTzRy7iEmyV5Is.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 15:29:52 GMT Connection: close Content-Length: 30005
2024-10-30 15:29:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-30 15:29:53 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:53 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:53 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:53 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152953Z-16849878b78qfbkc5yywmsbg0c00000007w000000000gnpr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:53 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:53 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:53 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152953Z-16849878b78km6fmmkbenhx76n00000007gg00000000nnsw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:53 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:53 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:53 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152953Z-16849878b78smng4k6nq15r6s400000009sg00000000b3yk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:53 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:53 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152953Z-16849878b78fkwcjkpn19c5dsn000000077000000000g59f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:53 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:53 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152953Z-16849878b78fhxrnedubv5byks00000006fg00000000qwua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:53 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:54 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:54 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:54 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152954Z-16849878b785jrf8dn0d2rczaw00000009f0000000001zzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:29:54 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:54 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:54 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 584104f8-c01e-008d-42fd-272eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152954Z-r197bdfb6b4skzzvqpzzd3xetg00000007pg00000000bghe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:54 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:54 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:54 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 134a0630-601e-0084-685d-2a6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152954Z-17c5cb586f62vrfquq10qybcuw000000017g000000008kmu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:54 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8d7929b6-101e-0017-6edc-2647c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152954Z-17c5cb586f6mkpfkkpsf1dpups00000003d000000000qbbu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:54 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b7bd549c-e01e-0003-5b3c-280fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152954Z-r197bdfb6b4hsj5bywyqk9r2xw00000009ng00000000e8uu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:55 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:55 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152955Z-15b8d89586f6nn8zqg1h5suba800000003cg00000000gd0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:55 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:55 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:55 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: de19335b-b01e-0098-4028-2acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152955Z-15b8d89586ff5l62aha9080wv000000009k0000000008vuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:55 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:55 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:55 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152955Z-16849878b78z2wx67pvzz63kdg00000006sg00000000q5g1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:55 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:55 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152955Z-16849878b78sx229w7g7at4nkg00000006k00000000014m5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:55 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:55 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:55 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:55 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152955Z-16849878b786fl7gm2qg4r5y7000000008cg00000000vfst x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:55 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:56 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:56 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152956Z-16849878b786fl7gm2qg4r5y7000000008e000000000pq6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:56 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:56 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:56 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:56 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152956Z-16849878b787bfsh7zgp804my400000006x000000000vy5y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:56 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:56 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152956Z-16849878b78fhxrnedubv5byks00000006n0000000003ra3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:56 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:56 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152956Z-16849878b78p8hrf1se7fucxk8000000094000000000ach1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:29:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:56 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:56 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: cd3f31c5-e01e-0033-6a5a-274695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152956Z-r197bdfb6b46kmj4701qkq602400000007bg000000009evf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:56 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:57 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:57 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152957Z-16849878b78qg9mlz11wgn0wcc00000007pg00000000wxzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:57 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:57 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:57 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:57 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152957Z-16849878b78zqkvcwgr6h55x9n00000007hg00000000w7sy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:57 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:57 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:57 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152957Z-16849878b78km6fmmkbenhx76n00000007p0000000001n11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:57 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:57 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:57 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:57 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152957Z-16849878b787bfsh7zgp804my400000006y000000000r5a5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:57 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:57 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:57 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7ae13fc9-101e-005a-3933-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152957Z-r197bdfb6b4bs5qf58wn14wgm000000007dg000000003vcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:57 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:58 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:58 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 395ac5b3-901e-0083-7e6a-27bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152958Z-r197bdfb6b4xfp4mncra29rqkc00000001hg00000000sbwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:58 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:58 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:58 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152958Z-16849878b78bcpfn2qf7sm6hsn00000009rg00000000u1q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:58 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:58 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:58 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152958Z-16849878b7867ttgfbpnfxt44s000000083000000000cwx4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:29:58 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:58 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:58 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152958Z-15b8d89586flzzksdx5d6q7g1000000003e0000000003wwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:58 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:58 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:58 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152958Z-16849878b78g2m84h2v9sta290000000071g00000000t46q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:58 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:58 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3802ff33-701e-0001-4310-28b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152958Z-r197bdfb6b46kmj4701qkq602400000007d0000000006wa1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:58 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:59 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:58 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 5926a802-601e-0032-207f-2aeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152958Z-16849878b78tg5n42kspfr0x48000000089g000000005mz4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:59 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:58 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:59 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0697abc8-001e-00ad-714f-28554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152959Z-15b8d89586fdmfsg1u7xrpfws00000000ceg00000000az23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:59 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:59 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152959Z-16849878b78fkwcjkpn19c5dsn000000074000000000vnph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:59 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152959Z-16849878b78fhxrnedubv5byks00000006m0000000008rfu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:59 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: e5751b3d-f01e-0099-0a8e-299171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152959Z-r197bdfb6b4grkz4xgvkar0zcs00000007wg00000000ahyb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:59 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:29:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152959Z-15b8d89586fmc8ck21zz2rtg1w00000005fg000000007288 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:29:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:59 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d518f54b-201e-006e-10e8-28bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152959Z-15b8d89586fnsf5zkvx8tfb0zc000000039000000000er99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:59 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 5b2d2bb9-d01e-0028-519c-277896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152959Z-15b8d89586fzcfbd8we4bvhqds000000032000000000gvf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:29:59 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:29:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T152959Z-16849878b785dznd7xpawq9gcn00000009q0000000003e8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:00 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:00 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153000Z-16849878b78fssff8btnns3b1400000008gg00000000cah1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:00 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:00 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:00 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7a23be84-101e-0079-6389-285913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153000Z-15b8d89586fzhrwgk23ex2bvhw0000000b9g000000001ewp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:00 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:00 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:00 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153000Z-16849878b782d4lwcu6h6gmxnw00000007v000000000p2v3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:00 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:00 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c1144745-701e-0098-7f2c-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153000Z-r197bdfb6b4skzzvqpzzd3xetg00000007sg000000003r3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:01 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153001Z-16849878b78km6fmmkbenhx76n00000007dg00000000yx14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:01 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:01 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153001Z-16849878b7828dsgct3vrzta7000000006k000000000rngm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:01 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:01 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: b357c660-c01e-008e-6e16-297381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153001Z-15b8d89586fcvr6p5956n5d0rc0000000ebg0000000058cv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:01 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:01 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:01 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1d33856d-201e-000c-0612-2979c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153001Z-17c5cb586f659tsm88uwcmn6s400000000s0000000007nqd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:01 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:01 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:01 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153001Z-16849878b78g2m84h2v9sta290000000073g00000000h003 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:30:01 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:02 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:02 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153002Z-16849878b78bjkl8dpep89pbgg00000006wg00000000k2gs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:02 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:02 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bf07d5f0-e01e-0020-6ed9-2ade90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153002Z-r197bdfb6b4qbfppwgs4nqza8000000006rg00000000pz6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:30:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:02 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:02 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153002Z-16849878b7898p5f6vryaqvp58000000090g00000000kc8q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:02 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:02 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:02 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 4ecf21c8-401e-002a-0558-26c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153002Z-17c5cb586f6hn8cl90dxzu28kw000000088g00000000c1d8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:02 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:02 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153002Z-16849878b785jrf8dn0d2rczaw00000009b000000000kr76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:03 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:03 UTC	498	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:03 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e6885a93-401e-0078-5ec2-2a4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153003Z-r197bdfb6b4cxj4bmw6ag8gees00000000yg0000000051ma x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-30 15:30:03 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:03 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 2fe3f320-d01e-0065-1a0d-29b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153003Z-r197bdfb6b4qbfppwgs4nqza8000000006vg00000000c61c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:03 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153003Z-16849878b78q9m8bqvwuva4svc00000006t000000000aaqr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:03 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:03 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153003Z-16849878b78q9m8bqvwuva4svc00000006mg00000000ydwb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:03 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:03 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af2b1dc9-001e-0066-0d6c-27561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153003Z-16849878b786fl7gm2qg4r5y7000000008hg000000007pcv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:04 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:04 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153004Z-16849878b78fssff8btnns3b1400000008bg00000000yh0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:04 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:04 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:04 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:04 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 09711dcd-d01e-0066-4b94-2aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153004Z-17c5cb586f6z6tq2xr35mhd5x000000000u000000000bs07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:04 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:04 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:04 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 16f4e3a8-701e-0053-1d57-273a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153004Z-r197bdfb6b46kmj4701qkq602400000007ag00000000c8k5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:04 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:04 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:04 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153004Z-16849878b78zqkvcwgr6h55x9n00000007mg00000000qsbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:04 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:04 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:04 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:04 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: a9172f65-e01e-0020-698c-27de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153004Z-r197bdfb6b4qbfppwgs4nqza8000000006w0000000009xb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:04 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:05 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:05 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:05 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153005Z-16849878b78wc6ln1zsrz6q9w800000007wg00000000e8wu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:05 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:05 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:05 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:05 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153005Z-16849878b78x6gn56mgecg60qc0000000a30000000005qha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:05 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:05 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:05 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:05 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 97090380-701e-0032-52b4-2aa540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153005Z-16849878b78bjkl8dpep89pbgg00000006z0000000008srq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:05 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:05 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:05 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:05 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: f3c8e2ed-001e-0049-7afa-285bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153005Z-15b8d89586ff5l62aha9080wv000000009e000000000ktbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:05 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:05 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:05 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:05 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ca4b2a6a-001e-000b-1aff-2615a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153005Z-17c5cb586f6gkqkwd0x1ge8t0400000008rg00000000akfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:05 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:06 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:06 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:06 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153006Z-15b8d89586flzzksdx5d6q7g10000000039g00000000f1gb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:06 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:06 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:06 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:06 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153006Z-16849878b78nzcqcd7bed2fb6n00000000mg00000000nrz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:06 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:06 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:06 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:06 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153006Z-16849878b785dznd7xpawq9gcn00000009kg00000000hdfc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:06 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:06 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:06 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:06 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: d8669f86-801e-0083-53a9-29f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153006Z-17c5cb586f6mkpfkkpsf1dpups00000003n0000000002fem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:06 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:06 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:06 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:06 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153006Z-16849878b785dznd7xpawq9gcn00000009f000000000y44y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:06 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:06 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:07 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:06 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153006Z-16849878b78q9m8bqvwuva4svc00000006sg00000000by3c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:07 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:06 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:07 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:07 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 258e3987-401e-0047-4dfa-288597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153007Z-17c5cb586f6lxnvg801rcb3n8n00000008b0000000000tyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:07 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:07 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:07 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:07 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153007Z-16849878b78sx229w7g7at4nkg00000006b000000000wycn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:07 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:07 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:07 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:07 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153007Z-15b8d89586fvpb59307bn2rcac000000039g00000000dz7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:07 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:07 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:07 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:07 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153007Z-16849878b787bfsh7zgp804my4000000070000000000fdg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:07 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:07 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:07 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:07 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153007Z-16849878b78qg9mlz11wgn0wcc00000007v00000000097wf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:07 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:07 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:07 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:07 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c05ef2b3-701e-005c-2d6a-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153007Z-r197bdfb6b48pl4k4a912hk2g400000007g0000000006zb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:07 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:07 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:08 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:08 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 4f1f6d30-a01e-0070-1ae8-27573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153008Z-15b8d89586fmhjx6a8nf3qm53c000000020g00000000g0pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:08 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:08 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:08 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:08 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153008Z-16849878b78q9m8bqvwuva4svc00000006tg000000007x45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:30:08 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:08 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:08 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:08 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153008Z-16849878b78qg9mlz11wgn0wcc00000007pg00000000wywq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:08 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:08 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:08 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:08 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: a3252951-201e-0071-2d78-2aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153008Z-15b8d89586f8l5961kfst8fpb00000000kyg000000008ckh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:30:08 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:08 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:08 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:08 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: e1cf8e51-d01e-00a1-6880-2935b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153008Z-r197bdfb6b4bs5qf58wn14wgm0000000079000000000e7e3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:08 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:08 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:09 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:08 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153008Z-16849878b78x6gn56mgecg60qc00000009wg00000000y8s0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:09 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:09 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:09 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:09 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c0e66d29-801e-00a0-12d5-272196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153009Z-r197bdfb6b4zbthzeykwgnvx8s00000000z000000000facz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:09 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:09 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:09 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:09 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 6b4870b1-101e-0034-5fde-2896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153009Z-r197bdfb6b4skzzvqpzzd3xetg00000007sg000000003rm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:09 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:09 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:09 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:09 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153009Z-16849878b7867ttgfbpnfxt44s000000080g00000000sb11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:09 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:09 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:09 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:09 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 92eac08a-601e-0001-29b2-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153009Z-16849878b78fkwcjkpn19c5dsn000000075g00000000q41y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:09 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:09 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:09 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:09 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 10294bf0-701e-0021-254d-273d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153009Z-17c5cb586f6fqqst87nqkbsx1c00000006n000000000cv9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:09 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:09 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:10 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:09 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153009Z-16849878b78j7llf5vkyvvcehs00000009d0000000000mb7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:10 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:10 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:10 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 44c445c3-601e-003e-0f9c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153010Z-15b8d89586f5s5nz3ffrgxn5ac00000008vg00000000e1gr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:10 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:10 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:10 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:10 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: a4e3dea6-301e-005d-1111-29e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153010Z-r197bdfb6b46kmj4701qkq602400000007ag00000000c8uv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:10 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49746	40.99.157.50	443	3328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:10 UTC	853	OUT	GET /mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA= HTTP/1.1 Host: outlook.live.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:30:10 UTC	852	IN	HTTP/1.1 417 Server: Microsoft-IIS/10.0 request-id: db3df498-da6d-51f6-feec-d8e3d62574de Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedFETarget: BE1P281CU015.internal.outlook.com X-BackEndHttpStatus: 417 X-NanoProxy: 1 X-Proxy-BackendServerStatus: 417 X-CalculatedBETarget: BEUP281MB3616.DEUP281.PROD.OUTLOOK.COM X-FEServer: BE1P281CA0178 x-besku: UNKNOWN X-BackEndHttpStatus: 417 X-Proxy-RoutingCorrectness: 1 X-FEProxyInfo: FR2P281CA0140.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA MS-CV: mPQ9223a9lH+7Njj1iV03g.1.1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: FRA X-BEPartition: Clique/CLDEUP281HHN03 X-Powered-By: ASP.NET X-FEServer: FR2P281CA0140 Date: Wed, 30 Oct 2024 15:30:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:10 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:10 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:10 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 5fdb5a9a-801e-00a0-5f9d-292196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153010Z-17c5cb586f6mhqqby1dwph2kzs00000003m00000000049s2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:30:10 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:10 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:10 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:10 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 80bd6f28-d01e-002b-3d65-2725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153010Z-r197bdfb6b4c8q4qvwwy2byzsw00000008fg00000000fpp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:10 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153011Z-16849878b78x6gn56mgecg60qc0000000a20000000009uxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:11 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:11 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:11 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:11 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153011Z-16849878b78fkwcjkpn19c5dsn000000074g00000000te4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:30:11 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:11 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:11 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 6d58be1b-301e-0052-189d-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153011Z-17c5cb586f64v7xsc2ahm8gsgw000000035g00000000dv1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:11 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:11 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 73804715-701e-0021-6991-2a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153011Z-r197bdfb6b4n9cxdnknw89p4zg00000001600000000097yt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:11 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:11 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:11 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:11 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4113dc96-c01e-008e-5a2a-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153011Z-16849878b78j7llf5vkyvvcehs00000009cg000000003etm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:30:11 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:11 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:11 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153011Z-16849878b78hh85qc40uyr8sc800000008d000000000tr8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:11 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:12 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4bda3d21-a01e-0053-54ed-288603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153012Z-15b8d89586fnsf5zkvx8tfb0zc00000003b000000000bkgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:12 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:12 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:12 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:12 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153012Z-16849878b78nzcqcd7bed2fb6n00000000kg00000000nrrd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:12 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:12 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:12 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:12 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153012Z-16849878b7828dsgct3vrzta7000000006qg000000005rc2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:12 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:12 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:12 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ddb9aa53-101e-008d-17e8-2992e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153012Z-17c5cb586f6mkpfkkpsf1dpups00000003f000000000h9eg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:12 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:12 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:12 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153012Z-16849878b78wc6ln1zsrz6q9w800000007u000000000sp1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:12 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:13 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153013Z-16849878b78smng4k6nq15r6s400000009s000000000busy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:13 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:13 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153013Z-16849878b782d4lwcu6h6gmxnw00000007sg00000000wbug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:30:13 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:13 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:13 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 63860650-101e-00a2-42b4-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153013Z-16849878b78qg9mlz11wgn0wcc00000007pg00000000wz7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:13 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:13 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:13 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: c49cf7be-b01e-0002-3880-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153013Z-16849878b78xblwksrnkakc08w00000007e000000000kn33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 15:30:13 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:13 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:13 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153013Z-16849878b7898p5f6vryaqvp580000000930000000008qce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:13 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:13 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:13 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153013Z-15b8d89586fnsf5zkvx8tfb0zc000000038g00000000hzax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:14 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:14 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: d36ad09b-701e-0098-4cde-2a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153014Z-17c5cb586f6zcqf8r7the4ske000000000e0000000006zt6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:14 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e20e9adc-401e-0083-18ae-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153014Z-16849878b78tg5n42kspfr0x480000000890000000007nzb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:14 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:14 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153014Z-16849878b78bjkl8dpep89pbgg00000006xg00000000e342 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:14 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:14 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:14 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 440f6722-a01e-0084-3501-299ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153014Z-17c5cb586f6mkpfkkpsf1dpups00000003dg00000000q91f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:14 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:14 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:14 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: e4ad7cd9-001e-0079-1b67-2712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153014Z-17c5cb586f6hn8cl90dxzu28kw00000008a000000000ac7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:14 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:14 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:14 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153014Z-16849878b78sx229w7g7at4nkg00000006bg00000000v1u6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:15 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:15 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:15 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 23d501f6-c01e-0079-39b4-2ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153015Z-r197bdfb6b4zbthzeykwgnvx8s00000001100000000099df x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:15 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:15 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153015Z-15b8d89586fmhjx6a8nf3qm53c00000001zg00000000hme8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:15 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:15 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6dfdd6d0-d01e-00a1-15fd-2535b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153015Z-17c5cb586f6hn8cl90dxzu28kw000000089000000000b9sw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:15 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:15 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:15 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 8e66950d-f01e-0003-769c-274453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153015Z-15b8d89586flspj6y6m5fk442w0000000e6g000000003e6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:15 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:15 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:15 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:15 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94cf4c5c-c01e-0034-1914-272af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153015Z-16849878b78qfbkc5yywmsbg0c00000007ug00000000qs08 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:15 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:15 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:15 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: c9277d07-501e-0047-62ae-24ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153015Z-15b8d89586fzhrwgk23ex2bvhw0000000b4g00000000axt9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:16 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:30:16 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 15:30:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:30:16 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 1a449efb-c01e-0082-601d-27af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T153016Z-r197bdfb6b46kdskt78qagqq1c00000008mg000000000gub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 15:30:16 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5004, Parent PID: 3756

General

Target ID:	0
Start time:	11:28:52
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3328, Parent PID: 5004

General

Target ID:	2
Start time:	11:28:55
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2012,i,1598354833328977801,17481950832282931190,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6328, Parent PID: 3756

General

Target ID:	3
Start time:	11:28:57
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA="
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5004, Parent PID: 3756

General

Chronological Activities

Analysis Process: chrome.exePID: 3328, Parent PID: 5004

General

Chronological Activities

Analysis Process: chrome.exePID: 6328, Parent PID: 3756

General

Chronological Activities

Disassembly

Windows Analysis Report
http://outlook.live.com/mail/0/inbox/id/AQMkADAwATExADVjNy00YzMzAC05ZTQwLTAwAi0wMAoARgAAA070nLauIAJFmHU0YzT%2081AHAIt%20/aGQeupPvL9x/eu1kfkAAAIBDAAAAIt%20/aGQeupPvL9x/eu1kfkABpOmfkgAAAA=