Edit tour

Windows Analysis Report
https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID

Overview

General Information

Sample URL:	https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
Analysis ID:	1545851
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6096 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=2028,i,7827939660576792006,6226119586176521499,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://widget.us.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49884 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: ib.adnxs.com to https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3jl2MYxko6V5JtkjTfIri44e3TEWHxHcULCO9CmpqHJ3uPQdmx1p2kMBK0-shtJCiNws1tYedMnX0vHKleXKTNlUbX_sODoozpBDrKZXQfI.; receive-cookie-deprecation=1; uuid2=7888404678500780472
Source: global traffic	HTTP traffic detected: GET /dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472 HTTP/1.1Host: dis.criteo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472 HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: widget.us.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://widget.us.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: widget.us.criteo.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49884 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/5@10/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=2028,i,7827939660576792006,6226119586176521499,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=2028,i,7827939660576792006,6226119586176521499,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID	0%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
widget.us5.vip.prod.criteo.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false		unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false		unknown
www.google.com	142.250.186.36	true	false	0%, Virustotal, Browse	unknown
ib.anycast.adnxs.com	37.252.171.52	true	false		unknown
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
dis.criteo.com	unknown	unknown	false		unknown
ib.adnxs.com	unknown	unknown	false		unknown
widget.us.criteo.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID	false	unknown
https://widget.us.criteo.com/favicon.ico	false	unknown
https://widget.us.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472	false	unknown
https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID	false	unknown
https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
74.119.117.16	widget.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
37.252.171.52	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545851
Start date and time:	2024-10-31 07:36:31 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/5@10/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.185.142, 66.102.1.84, 34.104.35.123, 52.149.20.212, 88.221.110.91, 2.16.100.168, 192.229.221.95, 52.165.164.15, 20.242.39.171, 142.250.184.227
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, xandr-g-geo.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 40

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	2.82524262532307
Encrypted:	false
SSDEEP:	12:GyX2nSklp4gE/K/LGvM+v2rrdXGSimBNJWUDU:d/CEMZvdXGSisrR
MD5:	FE8AE0F54388137B436B9F3D8D641AA9
SHA1:	C007DC4A9CEA8C9A82F94B16C455ECDE69F07842
SHA-256:	0B1AEB77C5D98B76F57CCD3F5144A9C776CDE47F77169646DACAE651BC546A60
SHA-512:	4CA056CD160FBAB2DEDA445D1BA076073980F6D1BD28B9A8E89C61DAB4149E57E2BCE662D4B2A43E85EE9F7F30870985CD824086E290FC912E89B8111B0FB064
Malicious:	false
Reputation:	low
URL:	https://widget.us.criteo.com/favicon.ico
Preview:	..............h.......(....... ...........@............................v..GT^.$d...m..5\\|.>Xm..i..PPP..q..,`...t...o..BVf..g..1^..(b..KRX.:Zs.8[x..r..MQT..l...p..EUa..n...h..&c..*a...t..AWi.ISZ. f...u..NPR..s..?Wk.;Yq.9Zv.2]..LQV..o..HS\..n..=Xo.6\z.'c...g..FT`..u...t..OPQ.%c..)b...u...u..OPP.NPS.MQS.LQU.JRX..n..ETa.>Xl..i...h..8[w.1^........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	2.82524262532307
Encrypted:	false
SSDEEP:	12:GyX2nSklp4gE/K/LGvM+v2rrdXGSimBNJWUDU:d/CEMZvdXGSisrR
MD5:	FE8AE0F54388137B436B9F3D8D641AA9
SHA1:	C007DC4A9CEA8C9A82F94B16C455ECDE69F07842
SHA-256:	0B1AEB77C5D98B76F57CCD3F5144A9C776CDE47F77169646DACAE651BC546A60
SHA-512:	4CA056CD160FBAB2DEDA445D1BA076073980F6D1BD28B9A8E89C61DAB4149E57E2BCE662D4B2A43E85EE9F7F30870985CD824086E290FC912E89B8111B0FB064
Malicious:	false
Reputation:	low
Preview:	..............h.......(....... ...........@............................v..GT^.$d...m..5\\|.>Xm..i..PPP..q..,`...t...o..BVf..g..1^..(b..KRX.:Zs.8[x..r..MQT..l...p..EUa..n...h..&c..*a...t..AWi.ISZ. f...u..NPR..s..?Wk.;Yq.9Zv.2]..LQV..o..HS\..n..=Xo.6\z.'c...g..FT`..u...t..OPQ.%c..)b...u...u..OPP.NPS.MQS.LQU.JRX..n..ETa.>Xl..i...h..8[w.1^........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://widget.us.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472
Preview:	GIF89a.............!.......,...........D..;

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 07:37:16.083972931 CET	49675	443	192.168.2.4	173.222.162.32
Oct 31, 2024 07:37:25.723067999 CET	49675	443	192.168.2.4	173.222.162.32
Oct 31, 2024 07:37:26.956914902 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:26.956975937 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:26.957042933 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:26.957061052 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:26.957103968 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:26.957174063 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:26.957529068 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:26.957560062 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:26.957767963 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:26.957803011 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.036880970 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.039283037 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.046406984 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.046448946 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.047349930 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.047420979 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.083692074 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.237859011 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.237909079 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.238922119 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.239006042 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.424832106 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.425026894 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.425085068 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.425188065 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.469532967 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.469573975 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.473601103 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.473629951 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.513607025 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.531034946 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.597103119 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.639358997 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.740582943 CET	49739	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:37:28.740638018 CET	443	49739	142.250.186.36	192.168.2.4
Oct 31, 2024 07:37:28.740715027 CET	49739	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:37:28.741120100 CET	49739	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:37:28.741139889 CET	443	49739	142.250.186.36	192.168.2.4
Oct 31, 2024 07:37:28.837914944 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.837995052 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.837997913 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.838061094 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.860961914 CET	49735	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.860989094 CET	443	49735	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:28.904458046 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:28.947377920 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:29.157517910 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:29.157581091 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:29.157601118 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:29.157659054 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:29.217916012 CET	49736	443	192.168.2.4	37.252.171.52
Oct 31, 2024 07:37:29.217971087 CET	443	49736	37.252.171.52	192.168.2.4
Oct 31, 2024 07:37:29.282985926 CET	49740	443	192.168.2.4	178.250.1.9
Oct 31, 2024 07:37:29.283036947 CET	443	49740	178.250.1.9	192.168.2.4
Oct 31, 2024 07:37:29.283104897 CET	49740	443	192.168.2.4	178.250.1.9
Oct 31, 2024 07:37:29.283674002 CET	49740	443	192.168.2.4	178.250.1.9
Oct 31, 2024 07:37:29.283689022 CET	443	49740	178.250.1.9	192.168.2.4
Oct 31, 2024 07:37:29.605844021 CET	443	49739	142.250.186.36	192.168.2.4
Oct 31, 2024 07:37:29.619172096 CET	49739	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:37:29.619196892 CET	443	49739	142.250.186.36	192.168.2.4
Oct 31, 2024 07:37:29.620744944 CET	443	49739	142.250.186.36	192.168.2.4
Oct 31, 2024 07:37:29.620837927 CET	49739	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:37:29.631297112 CET	49739	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:37:29.631390095 CET	443	49739	142.250.186.36	192.168.2.4
Oct 31, 2024 07:37:29.676789045 CET	49739	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:37:29.676804066 CET	443	49739	142.250.186.36	192.168.2.4
Oct 31, 2024 07:37:29.729993105 CET	49739	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:37:29.923952103 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:29.924057007 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:29.924179077 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:29.926460981 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:29.926496983 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:30.154922009 CET	443	49740	178.250.1.9	192.168.2.4
Oct 31, 2024 07:37:30.155333996 CET	49740	443	192.168.2.4	178.250.1.9
Oct 31, 2024 07:37:30.155366898 CET	443	49740	178.250.1.9	192.168.2.4
Oct 31, 2024 07:37:30.156322002 CET	443	49740	178.250.1.9	192.168.2.4
Oct 31, 2024 07:37:30.156388998 CET	49740	443	192.168.2.4	178.250.1.9
Oct 31, 2024 07:37:30.203423023 CET	49740	443	192.168.2.4	178.250.1.9
Oct 31, 2024 07:37:30.203509092 CET	443	49740	178.250.1.9	192.168.2.4
Oct 31, 2024 07:37:30.203707933 CET	49740	443	192.168.2.4	178.250.1.9
Oct 31, 2024 07:37:30.203727961 CET	443	49740	178.250.1.9	192.168.2.4
Oct 31, 2024 07:37:30.257466078 CET	49740	443	192.168.2.4	178.250.1.9
Oct 31, 2024 07:37:30.450226068 CET	443	49740	178.250.1.9	192.168.2.4
Oct 31, 2024 07:37:30.450304985 CET	443	49740	178.250.1.9	192.168.2.4
Oct 31, 2024 07:37:30.450536966 CET	49740	443	192.168.2.4	178.250.1.9
Oct 31, 2024 07:37:30.452738047 CET	49740	443	192.168.2.4	178.250.1.9
Oct 31, 2024 07:37:30.452756882 CET	443	49740	178.250.1.9	192.168.2.4
Oct 31, 2024 07:37:30.468410969 CET	49742	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:30.468444109 CET	443	49742	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:30.468671083 CET	49742	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:30.469038963 CET	49742	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:30.469053030 CET	443	49742	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:30.778296947 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:30.778392076 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:30.783634901 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:30.783699989 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:30.783896923 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:30.835583925 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:30.869424105 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:30.911345959 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:31.114736080 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:31.114784956 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:31.114911079 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:31.115931034 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:31.115972996 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:31.116029024 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:31.116044044 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:31.141907930 CET	49743	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:31.141958952 CET	443	49743	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:31.142060041 CET	49743	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:31.142141104 CET	443	49742	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:31.142662048 CET	49743	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:31.142692089 CET	443	49743	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:31.143145084 CET	49742	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:31.143158913 CET	443	49742	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:31.144170046 CET	443	49742	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:31.144249916 CET	49742	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:31.149302006 CET	49742	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:31.149375916 CET	443	49742	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:31.149862051 CET	49742	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:31.149868965 CET	443	49742	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:31.195386887 CET	49742	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:31.307604074 CET	443	49742	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:31.307667971 CET	443	49742	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:31.307826042 CET	49742	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:31.327744007 CET	49742	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:31.327754974 CET	443	49742	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:31.507703066 CET	49744	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:31.507756948 CET	443	49744	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:31.507929087 CET	49744	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:31.509471893 CET	49744	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:31.509486914 CET	443	49744	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:31.980565071 CET	443	49743	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:31.980653048 CET	49743	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:31.991653919 CET	49743	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:31.991692066 CET	443	49743	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:31.992062092 CET	443	49743	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:32.004688978 CET	49743	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:32.047358036 CET	443	49743	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:32.217308998 CET	443	49744	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:32.229852915 CET	49744	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:32.229876995 CET	443	49744	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:32.230201960 CET	443	49744	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:32.230833054 CET	49744	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:32.230966091 CET	443	49744	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:32.231240988 CET	49744	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:32.271362066 CET	443	49744	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:32.387532949 CET	443	49744	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:32.387589931 CET	443	49744	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:32.387739897 CET	49744	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:32.454252958 CET	443	49743	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:32.454325914 CET	443	49743	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:32.454401970 CET	49743	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:32.517446041 CET	49744	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:32.517466068 CET	443	49744	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:32.551583052 CET	49743	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:32.551583052 CET	49743	443	192.168.2.4	184.28.90.27
Oct 31, 2024 07:37:32.551639080 CET	443	49743	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:32.551666021 CET	443	49743	184.28.90.27	192.168.2.4
Oct 31, 2024 07:37:32.696434021 CET	49745	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:32.696521997 CET	443	49745	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:32.696599960 CET	49745	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:32.723356009 CET	49745	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:32.723382950 CET	443	49745	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:33.396959066 CET	443	49745	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:33.397236109 CET	49745	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:33.397291899 CET	443	49745	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:33.398201942 CET	443	49745	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:33.398274899 CET	49745	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:33.398629904 CET	49745	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:33.398708105 CET	443	49745	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:33.398799896 CET	49745	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:33.398817062 CET	443	49745	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:33.442312002 CET	49745	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:33.558515072 CET	443	49745	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:33.558562040 CET	443	49745	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:33.558629990 CET	49745	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:33.559294939 CET	49745	443	192.168.2.4	74.119.117.16
Oct 31, 2024 07:37:33.559350014 CET	443	49745	74.119.117.16	192.168.2.4
Oct 31, 2024 07:37:39.598154068 CET	443	49739	142.250.186.36	192.168.2.4
Oct 31, 2024 07:37:39.598212004 CET	443	49739	142.250.186.36	192.168.2.4
Oct 31, 2024 07:37:39.598390102 CET	49739	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:37:41.256652117 CET	49739	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:37:41.256666899 CET	443	49739	142.250.186.36	192.168.2.4
Oct 31, 2024 07:37:44.404181004 CET	49723	80	192.168.2.4	93.184.221.240
Oct 31, 2024 07:37:44.409373045 CET	80	49723	93.184.221.240	192.168.2.4
Oct 31, 2024 07:37:44.409475088 CET	49723	80	192.168.2.4	93.184.221.240
Oct 31, 2024 07:38:20.843874931 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:20.843902111 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:20.843976021 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:20.844633102 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:20.844645977 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.585005045 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.585186005 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:21.586563110 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:21.586574078 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.586808920 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.593416929 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:21.639355898 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.822968006 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.822988987 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.823054075 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.823101044 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:21.823121071 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.823158026 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:21.823278904 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:21.941301107 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.941320896 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.941493034 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:21.941502094 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.941580057 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:21.968709946 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.968724012 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.968868017 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:21.968879938 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:21.969127893 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.087460995 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.087495089 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.087533951 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.087541103 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.087570906 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.087625027 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.205899000 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.205916882 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.206001043 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.206001043 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.206008911 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.206140995 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.323874950 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.323892117 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.324028015 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.324035883 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.324088097 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.325112104 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.325126886 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.325210094 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.325210094 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.325217009 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.325315952 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.443269014 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.443284988 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.443505049 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.443510056 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.443722010 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.561187983 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.561201096 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.561273098 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.561280012 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.561331987 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.652900934 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.652915001 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.652987003 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.652992964 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.653039932 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.680255890 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.680269003 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.680331945 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.680337906 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.680377960 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.798362970 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.798377037 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.798432112 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.798438072 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.798479080 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.840056896 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.840070963 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.840133905 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:22.840138912 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:22.840178967 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.128624916 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.128683090 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.128690004 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.128739119 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.128819942 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.128832102 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.128842115 CET	49753	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.128846884 CET	443	49753	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.179893017 CET	49754	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.179940939 CET	443	49754	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.180039883 CET	49754	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.181596994 CET	49755	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.181615114 CET	443	49755	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.181687117 CET	49755	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.181838036 CET	49754	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.181854010 CET	443	49754	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.183232069 CET	49755	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.183244944 CET	443	49755	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.184587002 CET	49756	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.184629917 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.184737921 CET	49756	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.184922934 CET	49756	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.184937954 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.185056925 CET	49757	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.185148001 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.185225010 CET	49757	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.185470104 CET	49757	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.185524940 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.185811043 CET	49758	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.185818911 CET	443	49758	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.185883045 CET	49758	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.185969114 CET	49758	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.185977936 CET	443	49758	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.902579069 CET	443	49754	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.903512955 CET	49754	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.903512955 CET	49754	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.903533936 CET	443	49754	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.903539896 CET	443	49754	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.912075043 CET	443	49755	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.912597895 CET	49755	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.912611008 CET	443	49755	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.912883997 CET	49755	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.912889004 CET	443	49755	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.913985968 CET	443	49758	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.914618969 CET	49758	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.914618969 CET	49758	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.914640903 CET	443	49758	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.914655924 CET	443	49758	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.918071032 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.918375969 CET	49756	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.918384075 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.918669939 CET	49756	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.918673992 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.920097113 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.920386076 CET	49757	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.920411110 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:23.920784950 CET	49757	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:23.920794010 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.031440020 CET	443	49754	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.031456947 CET	443	49754	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.031495094 CET	443	49754	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.031558990 CET	49754	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.031744003 CET	49754	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.031744003 CET	49754	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.031842947 CET	49754	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.031856060 CET	443	49754	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.034303904 CET	49759	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.034331083 CET	443	49759	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.034552097 CET	49759	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.034617901 CET	49759	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.034627914 CET	443	49759	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.041208982 CET	443	49755	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.041265011 CET	443	49755	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.041376114 CET	49755	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.041543007 CET	49755	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.041551113 CET	443	49755	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.041594028 CET	49755	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.041598082 CET	443	49755	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.043440104 CET	49760	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.043469906 CET	443	49760	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.043622017 CET	49760	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.043685913 CET	49760	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.043697119 CET	443	49760	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.044111967 CET	443	49758	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.044239998 CET	443	49758	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.044302940 CET	49758	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.044302940 CET	49758	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.044436932 CET	49758	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.044447899 CET	443	49758	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.045990944 CET	49761	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.046015978 CET	443	49761	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.046173096 CET	49761	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.046278000 CET	49761	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.046292067 CET	443	49761	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.051237106 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.051254988 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.051343918 CET	49757	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.051356077 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.051399946 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.051495075 CET	49757	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.051512957 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.051522017 CET	49757	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.051522017 CET	49757	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.051531076 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.051533937 CET	443	49757	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.053145885 CET	49762	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.053153992 CET	443	49762	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.053277969 CET	49762	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.053339005 CET	49762	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.053347111 CET	443	49762	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.107624054 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.107649088 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.107825041 CET	49756	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.107836962 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.107937098 CET	49756	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.108143091 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.108155966 CET	49756	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.108155966 CET	49756	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.108161926 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.108191967 CET	443	49756	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.111318111 CET	49763	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.111326933 CET	443	49763	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.111555099 CET	49763	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.111608982 CET	49763	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.111619949 CET	443	49763	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.753576994 CET	443	49759	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.754089117 CET	49759	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.754113913 CET	443	49759	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.754755974 CET	49759	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.754762888 CET	443	49759	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.791372061 CET	443	49762	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.791724920 CET	49762	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.791737080 CET	443	49762	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.792272091 CET	49762	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.792277098 CET	443	49762	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.794188023 CET	443	49761	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.794564009 CET	49761	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.794576883 CET	443	49761	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.795067072 CET	49761	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.795072079 CET	443	49761	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.813036919 CET	443	49760	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.813349009 CET	49760	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.813354969 CET	443	49760	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.813893080 CET	49760	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.813895941 CET	443	49760	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.843202114 CET	443	49763	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.843713999 CET	49763	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.843720913 CET	443	49763	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.844259977 CET	49763	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.844264030 CET	443	49763	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.880518913 CET	443	49759	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.880743027 CET	443	49759	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.880840063 CET	49759	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.881186962 CET	49759	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.881186962 CET	49759	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.881211996 CET	443	49759	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.881223917 CET	443	49759	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.884871960 CET	49765	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.884962082 CET	443	49765	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.885050058 CET	49765	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.885324001 CET	49765	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.885379076 CET	443	49765	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.923322916 CET	443	49762	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.923513889 CET	443	49762	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.923615932 CET	49762	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.923782110 CET	49762	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.923790932 CET	443	49762	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.923800945 CET	49762	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.923804998 CET	443	49762	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.924465895 CET	443	49761	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.925041914 CET	443	49761	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.925359011 CET	49761	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.925386906 CET	49761	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.925400972 CET	443	49761	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.928040981 CET	49766	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.928124905 CET	443	49766	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.928247929 CET	49766	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.930778980 CET	49767	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.930830956 CET	443	49767	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.930902958 CET	49767	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.931037903 CET	49766	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.931076050 CET	443	49766	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.931610107 CET	49767	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.931638956 CET	443	49767	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.944576025 CET	443	49760	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.944626093 CET	443	49760	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.945054054 CET	49760	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.945290089 CET	49760	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.945303917 CET	443	49760	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.945317984 CET	49760	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.945322037 CET	443	49760	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.948709965 CET	49768	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.948726892 CET	443	49768	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.948818922 CET	49768	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.949019909 CET	49768	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.949035883 CET	443	49768	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.973248005 CET	443	49763	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.973484039 CET	443	49763	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.973537922 CET	49763	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.974841118 CET	49763	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.974848986 CET	443	49763	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.974915028 CET	49763	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.974920034 CET	443	49763	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.979410887 CET	49769	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.979444027 CET	443	49769	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:24.979523897 CET	49769	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.979700089 CET	49769	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:24.979712963 CET	443	49769	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.626511097 CET	443	49765	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.627712011 CET	49765	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.627789974 CET	443	49765	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.628710985 CET	49765	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.628725052 CET	443	49765	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.658545017 CET	443	49766	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.658768892 CET	443	49767	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.659275055 CET	49766	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.659332991 CET	443	49766	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.660109043 CET	49766	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.660123110 CET	443	49766	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.660661936 CET	49767	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.660681963 CET	443	49767	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.661865950 CET	49767	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.661875963 CET	443	49767	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.702955961 CET	443	49768	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.703449965 CET	49768	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.703459024 CET	443	49768	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.704102993 CET	49768	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.704107046 CET	443	49768	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.717484951 CET	443	49769	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.717964888 CET	49769	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.717989922 CET	443	49769	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.719322920 CET	49769	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.719327927 CET	443	49769	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.755776882 CET	443	49765	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.755959034 CET	443	49765	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.756242037 CET	49765	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.756422997 CET	49765	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.756453991 CET	443	49765	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.756499052 CET	49765	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.756515026 CET	443	49765	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.765397072 CET	49770	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.765419006 CET	443	49770	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.765482903 CET	49770	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.765722036 CET	49770	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.765732050 CET	443	49770	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.788012981 CET	443	49766	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.788232088 CET	443	49766	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.788311958 CET	49766	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.788487911 CET	49766	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.788522005 CET	443	49766	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.788568020 CET	49766	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.788583994 CET	443	49766	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.792927027 CET	443	49767	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.792977095 CET	443	49767	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.793071985 CET	49767	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.793148041 CET	49771	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.793171883 CET	443	49771	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.793236971 CET	49771	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.793476105 CET	49767	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.793476105 CET	49767	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.793494940 CET	443	49767	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.793515921 CET	443	49767	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.796273947 CET	49771	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.796288967 CET	443	49771	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.798394918 CET	49772	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.798427105 CET	443	49772	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.798537016 CET	49772	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.798755884 CET	49772	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.798768044 CET	443	49772	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.837485075 CET	443	49768	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.837827921 CET	443	49768	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.837888956 CET	49768	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.838083029 CET	49768	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.838089943 CET	443	49768	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.838167906 CET	49768	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.838172913 CET	443	49768	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.841197968 CET	49773	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.841238976 CET	443	49773	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.841335058 CET	49773	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.841928005 CET	49773	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.841944933 CET	443	49773	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.847747087 CET	443	49769	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.848268986 CET	443	49769	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.848328114 CET	49769	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.848575115 CET	49769	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.848582983 CET	443	49769	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.848603964 CET	49769	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.848608971 CET	443	49769	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.851682901 CET	49774	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.851711035 CET	443	49774	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:25.851840019 CET	49774	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.852272034 CET	49774	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:25.852286100 CET	443	49774	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.505189896 CET	443	49770	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.505811930 CET	49770	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.505824089 CET	443	49770	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.506287098 CET	49770	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.506293058 CET	443	49770	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.524245024 CET	443	49771	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.524626970 CET	49771	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.524647951 CET	443	49771	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.525114059 CET	49771	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.525121927 CET	443	49771	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.533566952 CET	443	49772	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.533899069 CET	49772	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.533912897 CET	443	49772	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.534338951 CET	49772	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.534343004 CET	443	49772	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.570061922 CET	443	49773	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.570790052 CET	49773	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.570822001 CET	443	49773	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.571465969 CET	49773	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.571472883 CET	443	49773	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.620518923 CET	443	49774	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.633821011 CET	49774	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.633821011 CET	49774	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.633831024 CET	443	49774	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.633843899 CET	443	49774	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.635341883 CET	443	49770	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.635425091 CET	443	49770	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.636306047 CET	49770	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.636390924 CET	49770	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.636390924 CET	49770	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.636400938 CET	443	49770	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.636409044 CET	443	49770	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.640422106 CET	49775	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.640475035 CET	443	49775	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.640618086 CET	49775	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.640794992 CET	49775	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.640814066 CET	443	49775	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.653163910 CET	443	49771	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.653228045 CET	443	49771	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.653469086 CET	49771	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.653553963 CET	49771	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.653553963 CET	49771	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.653568029 CET	443	49771	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.653575897 CET	443	49771	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.656409025 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.656429052 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.656512022 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.657037973 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.657052040 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.664190054 CET	443	49772	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.664580107 CET	443	49772	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.664789915 CET	49772	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.665083885 CET	49772	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.665093899 CET	443	49772	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.665127039 CET	49772	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.665132046 CET	443	49772	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.669063091 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.669078112 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.672193050 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.677655935 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.677664995 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.700257063 CET	443	49773	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.700376034 CET	443	49773	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.700510025 CET	49773	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.700588942 CET	49773	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.700588942 CET	49773	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.700606108 CET	443	49773	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.700619936 CET	443	49773	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.705038071 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.705051899 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.705213070 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.708048105 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.708060026 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.765521049 CET	443	49774	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.765614986 CET	443	49774	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.765681028 CET	49774	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.766098976 CET	49774	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.766103029 CET	443	49774	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.766365051 CET	49774	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.766369104 CET	443	49774	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.770571947 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.770581961 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:26.774107933 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.777040958 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:26.777050972 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.383338928 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.395375013 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.409907103 CET	443	49775	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.423629999 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.426949024 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.432849884 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.432861090 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.433413029 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.433422089 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.433957100 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.433957100 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.433962107 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.433974981 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.434293032 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.434308052 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.434886932 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.434899092 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.435179949 CET	49775	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.435208082 CET	443	49775	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.435636044 CET	49775	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.435642004 CET	443	49775	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.503607988 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.504055977 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.504065990 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.504489899 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.504493952 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.556081057 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.556508064 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.556561947 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.556588888 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.556602955 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.556612015 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.556617022 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.557334900 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.557949066 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.557995081 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.558042049 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.558085918 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.558094025 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.558166981 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.558280945 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.558280945 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.558331966 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.558339119 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.560667992 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.560703039 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.560764074 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.561501026 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.561523914 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.561574936 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.561630964 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.561642885 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.561691999 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.561885118 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.561885118 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.561903000 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.561906099 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.561914921 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.561927080 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.565891981 CET	443	49775	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.566031933 CET	443	49775	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.566083908 CET	49775	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.566122055 CET	49775	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.566134930 CET	443	49775	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.566149950 CET	49775	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.566157103 CET	443	49775	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.568105936 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.568114042 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.568176985 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.568299055 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.568309069 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.631686926 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.631920099 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.631972075 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.632025957 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.632031918 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.632040977 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.632045031 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.634777069 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.634826899 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:27.634896994 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.635030985 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:27.635046959 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.286940098 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.288604021 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.288634062 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.289546013 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.289554119 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.301861048 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.313940048 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.322412968 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.322424889 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.323342085 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.323348045 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.324337006 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.324369907 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.324995041 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.325000048 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.339121103 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.339612961 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.339627981 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.340327024 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.340332031 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.374094963 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.374533892 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.374548912 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.375221968 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.375226974 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.416368008 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.416482925 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.416532993 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.416682959 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.416704893 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.416719913 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.416728973 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.423376083 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.423414946 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.423480034 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.424041986 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.424051046 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.450242043 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.450294971 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.450345039 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.450608969 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.450623035 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.450635910 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.450644016 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.454732895 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.454751968 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.454817057 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.455054998 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.455066919 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.458199024 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.458511114 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.458560944 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.458723068 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.458734989 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.458758116 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.458762884 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.463413000 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.463427067 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.463501930 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.463716030 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.463726044 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.476629019 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.476742029 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.476785898 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.476835012 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.476840019 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.476878881 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.476881981 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.480626106 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.480696917 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.480765104 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.480938911 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.480973005 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.507184029 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.507725954 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.507776022 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.507812023 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.507818937 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.507853031 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.507858038 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.511645079 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.511717081 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:28.511790037 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.511924028 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:28.511956930 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.152997017 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.153933048 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.153933048 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.153956890 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.153964996 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.170037985 CET	49790	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:38:29.170066118 CET	443	49790	142.250.186.36	192.168.2.4
Oct 31, 2024 07:38:29.173121929 CET	49790	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:38:29.173624992 CET	49790	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:38:29.173645020 CET	443	49790	142.250.186.36	192.168.2.4
Oct 31, 2024 07:38:29.181071997 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.182395935 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.182414055 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.183154106 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.183160067 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.184973955 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.185532093 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.185545921 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.186399937 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.186403990 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.219851971 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.220712900 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.220741987 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.221306086 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.221318960 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.238490105 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.239149094 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.239181995 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.239523888 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.239537954 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.283046961 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.283232927 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.283301115 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.283329010 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.283329010 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.283341885 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.283350945 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.285497904 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.285547972 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.285660982 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.285773993 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.285803080 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.312144995 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.312328100 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.312411070 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.312448978 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.312578917 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.312578917 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.312591076 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.312598944 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.312622070 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.312680960 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.312728882 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.312728882 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.312736988 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.312743902 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.314563990 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.314574957 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.314610004 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.314625978 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.314656019 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.314738989 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.314886093 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.314887047 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.314897060 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.314898968 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.350812912 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.350939989 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.351063013 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.351063013 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.351135969 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.351161003 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.353282928 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.353298903 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.353446960 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.353513002 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.353523970 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.368640900 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.368762970 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.368861914 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.368861914 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.368927002 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.368952036 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.370546103 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.370565891 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:29.370718956 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.370826006 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:29.370836973 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.003262043 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.003717899 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.003788948 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.004125118 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.004143000 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.022779942 CET	443	49790	142.250.186.36	192.168.2.4
Oct 31, 2024 07:38:30.025522947 CET	49790	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:38:30.025540113 CET	443	49790	142.250.186.36	192.168.2.4
Oct 31, 2024 07:38:30.025823116 CET	443	49790	142.250.186.36	192.168.2.4
Oct 31, 2024 07:38:30.026144981 CET	49790	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:38:30.026196957 CET	443	49790	142.250.186.36	192.168.2.4
Oct 31, 2024 07:38:30.032641888 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.033065081 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.033077955 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.033454895 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.033461094 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.049599886 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.049957037 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.049971104 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.050395966 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.050400972 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.067382097 CET	49790	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:38:30.094191074 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.094505072 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.094515085 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.094858885 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.094862938 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.129232883 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.129519939 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.129540920 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.129837036 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.129842997 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.132193089 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.132246017 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.132333040 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.132431984 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.132472992 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.132505894 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.132520914 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.134875059 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.134948015 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.135041952 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.135164976 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.135195017 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.160355091 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.160567045 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.160619974 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.160655022 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.160655022 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.160665035 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.160672903 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.162415981 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.162467003 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.162542105 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.162661076 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.162693024 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.180419922 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.180510044 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.180550098 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.180672884 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.180685997 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.180695057 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.180700064 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.182502031 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.182531118 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.182626963 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.182707071 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.182728052 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.227130890 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.227175951 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.227226019 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.227349997 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.227354050 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.227364063 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.227368116 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.229096889 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.229129076 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.229202032 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.229329109 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.229356050 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.262317896 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.262403965 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.262448072 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.262572050 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.262572050 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.262579918 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.262588978 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.264632940 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.264658928 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.264854908 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.265027046 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.265043974 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.876784086 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.877769947 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.877770901 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.877834082 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.877892017 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.900650978 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.901057005 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.901117086 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.901292086 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.901309013 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.910298109 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.910886049 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.910886049 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.910922050 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.910943985 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.958462954 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.959115982 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.959115982 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:30.959158897 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:30.959197044 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.005732059 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.006162882 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.006176949 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.006400108 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.006406069 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.007380009 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.007667065 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.007787943 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.007838964 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.007838964 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.007854939 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.007864952 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.010384083 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.010423899 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.010510921 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.010638952 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.010652065 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.031090975 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.031147003 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.031254053 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.031364918 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.031364918 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.031403065 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.031430960 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.033386946 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.033406019 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.033710957 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.033710957 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.033732891 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.040657997 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.040916920 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.041106939 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.041374922 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.041388035 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.041440964 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.041455030 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.043214083 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.043235064 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.043333054 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.043495893 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.043514967 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.086688995 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.087080956 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.087182045 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.087182045 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.087305069 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.087342024 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.089137077 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.089165926 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.089359999 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.089453936 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.089466095 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.137574911 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.137645960 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.137738943 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.137824059 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.137824059 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.137835026 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.137842894 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.139633894 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.139669895 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.139868021 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.139868021 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.139894962 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.737761974 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.738725901 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.738725901 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.738738060 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.738753080 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.766328096 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.767049074 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.767049074 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.767064095 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.767080069 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.777570009 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.778168917 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.778168917 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.778176069 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.778187037 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.855475903 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.855820894 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.855839968 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.856267929 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.856272936 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.874346018 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.874927998 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.874927998 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.874948025 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.874965906 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.896132946 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.896182060 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.896454096 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.896454096 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.896476030 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.896482944 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.898942947 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.898961067 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.899108887 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.899272919 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.899286985 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.910579920 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.910631895 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.910764933 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.910765886 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.910800934 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.910814047 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.912518024 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.912550926 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.912688017 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.912758112 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.912767887 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.947915077 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.948303938 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.948385000 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.948385000 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.948472977 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.948478937 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.950124979 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.950145960 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.950273037 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.950392962 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.950402975 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.991818905 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.992096901 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.992176056 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.992176056 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.992268085 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.992279053 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.993798018 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.993813038 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:31.993957996 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.994013071 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:31.994020939 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.003662109 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.003705025 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.003875971 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.003875971 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.003899097 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.003906965 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.005677938 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.005692959 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.005772114 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.005912066 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.005927086 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.839181900 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.839713097 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.839740992 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.840691090 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.840697050 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.959496975 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.960299969 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.960319996 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.961344957 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.961349010 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.966005087 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.966079950 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.966686964 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.966703892 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.967508078 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.967513084 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.967588902 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.967833042 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.967911005 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.968043089 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.968051910 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.968683958 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.968688011 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.968770027 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.968879938 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.968893051 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.969476938 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.969489098 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.970388889 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.970392942 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.976623058 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.976646900 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:32.976753950 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.977096081 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:32.977108955 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.090584993 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.090950012 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.091013908 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.091811895 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.091824055 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.091831923 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.091836929 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.097058058 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.097265959 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.097282887 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.097343922 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.097498894 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.097659111 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.098619938 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.098637104 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.098767042 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.099317074 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.099328041 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.100424051 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.100513935 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.100805044 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.101705074 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.101715088 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.103075981 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.103075981 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.103081942 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.103087902 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.105249882 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.105259895 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.109769106 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.109838963 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.109935045 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.110887051 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.110894918 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.111170053 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.111371994 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.111383915 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.113564014 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.113595009 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.113678932 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.113723040 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.113754988 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.145456076 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.145495892 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.348623037 CET	49724	80	192.168.2.4	93.184.221.240
Oct 31, 2024 07:38:33.354094982 CET	80	49724	93.184.221.240	192.168.2.4
Oct 31, 2024 07:38:33.354182005 CET	49724	80	192.168.2.4	93.184.221.240
Oct 31, 2024 07:38:33.866359949 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.868201017 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.868227959 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.869963884 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:33.869971991 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.990653038 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.992733955 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.994044065 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.996737957 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.996835947 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:33.996905088 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.016119003 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.016160011 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.016328096 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.016901016 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.016906977 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.017561913 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.017576933 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.017586946 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.017592907 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.017693043 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.017708063 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.018279076 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.018285990 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.018451929 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.018461943 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.018841028 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.018846989 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.030227900 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.030241966 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.030781984 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.030786991 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.053540945 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.053571939 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.053654909 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.054018974 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.054033995 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.143903971 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.144175053 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.144349098 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.144539118 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.144557953 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.144579887 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.144586086 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.146533966 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.146610975 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.146677017 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.158497095 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.158592939 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.158727884 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.169828892 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.169836044 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.169853926 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.169857979 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.171351910 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.171372890 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.171406984 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.171412945 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.177326918 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.177371979 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.177541971 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.178481102 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.178529024 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.178589106 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.179670095 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.179677963 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.179739952 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.179919004 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.179933071 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.180250883 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.180263996 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.180445910 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.180460930 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.224236012 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.224374056 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.224423885 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.224490881 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.224497080 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.224504948 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.224508047 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.227044106 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.227128983 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.227286100 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.227468014 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.227502108 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.780210972 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.781353951 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.781373024 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.782556057 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.782565117 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.902221918 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.902657032 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.902672052 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.903052092 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.903055906 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.908571959 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.908626080 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.908673048 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.908829927 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.908840895 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.908849955 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.908854961 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.911354065 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.911427975 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.911588907 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.911734104 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.911775112 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.911936998 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.912201881 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.912220001 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.912528038 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.912533998 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.914047956 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.914376020 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.914386988 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.914724112 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.914727926 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.960249901 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.960614920 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.960673094 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:34.961042881 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:34.961095095 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.031646967 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.031769037 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.031826019 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.031850100 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.031857967 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.031884909 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.031889915 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.033727884 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.033813000 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.033965111 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.034074068 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.034096956 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.041361094 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.041534901 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.041589022 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.041618109 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.041630030 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.041640043 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.041644096 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.043309927 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.043395042 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.043473959 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.043526888 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.043597937 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.043601990 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.043636084 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.043689013 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.043716908 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.043721914 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.043740988 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.043744087 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.045492887 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.045521021 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.045660019 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.045834064 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.045846939 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.088740110 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.088855982 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.088922977 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.088996887 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.088996887 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.089039087 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.089068890 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.090646029 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.090668917 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.090778112 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.090909958 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.090923071 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.648652077 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.649811983 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.649874926 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.650866032 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.650882006 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.770486116 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.771403074 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.771421909 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.772845030 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.772856951 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.779871941 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.779922009 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.779980898 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.780226946 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.780226946 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.780261993 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.780284882 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.784075975 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.785357952 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.785389900 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.785497904 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.785763025 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.785770893 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.786510944 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.786515951 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.786731958 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.786739111 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.800319910 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.800612926 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.800673008 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.801321983 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.801336050 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.818555117 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.819020987 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.819037914 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.819641113 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.819647074 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.902235985 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.902297020 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.902461052 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.902678967 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.902679920 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.902698994 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.902736902 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.908621073 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.908646107 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.908709049 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.908960104 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.908972979 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.914777040 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.915163040 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.915211916 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.916644096 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.916661978 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.921055079 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.921088934 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.921192884 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.921482086 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.921494961 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.936527014 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.936604977 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.936695099 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.937060118 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.937060118 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.937115908 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.937141895 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.939743996 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.939785957 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.939867973 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.940076113 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.940100908 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.947604895 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.947712898 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.947856903 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.948051929 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.948060036 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.948070049 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.948074102 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.950922966 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.950937986 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:35.951097965 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.951253891 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:35.951265097 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.512764931 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.513279915 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.513297081 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.513732910 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.513740063 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.626594067 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.627026081 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.627051115 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.627490044 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.627495050 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.641114950 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.641232967 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.641283989 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.641415119 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.641434908 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.641447067 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.641454935 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.644109011 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.644195080 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.644268990 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.644401073 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.644453049 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.664876938 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.665261030 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.665287018 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.665719986 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.665726900 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.676430941 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.676736116 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.676744938 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.677124977 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.677130938 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.677367926 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.677711010 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.677752018 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.678093910 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.678106070 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.756714106 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.756783009 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.756845951 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.756946087 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.756953955 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.756979942 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.756984949 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.759061098 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.759088993 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.759358883 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.759490013 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.759495020 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.796602011 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.796665907 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.796780109 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.797050953 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.797063112 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.801014900 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.801044941 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.801131010 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.801702976 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.801714897 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.805416107 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.805494070 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.805602074 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.805717945 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.805717945 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.805723906 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.805731058 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.807785988 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.808155060 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.808212996 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.808325052 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.808325052 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.808366060 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.808393002 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.812525034 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.812540054 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.812601089 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.812839031 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.812849998 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.813579082 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.813587904 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:36.813683987 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.813854933 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:36.813865900 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.385679007 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.386181116 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.386245966 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.386651993 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.386671066 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.516297102 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.516305923 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.516369104 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.516393900 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.516402006 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.516450882 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.516630888 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.516645908 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.516659021 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.516664982 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.517508984 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.517839909 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.517860889 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.518212080 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.518218040 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.519591093 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.519666910 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.519754887 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.519885063 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.519922018 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.533232927 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.533540010 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.533549070 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.533917904 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.533922911 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.545638084 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.545939922 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.545950890 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.546279907 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.546283960 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.550730944 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.551007032 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.551023960 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.551366091 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.551369905 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.648530960 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.648583889 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.648677111 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.648776054 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.648776054 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.648791075 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.648799896 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.651242971 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.651355982 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.651482105 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.651602983 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.651642084 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.665640116 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.665993929 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.666089058 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.666106939 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.666106939 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.666115046 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.666124105 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.668123007 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.668164968 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.668320894 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.668384075 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.668401003 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.680963039 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.680977106 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.681013107 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.681049109 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.681097984 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.681113958 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.681181908 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.681186914 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.681190014 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.681287050 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.681315899 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.681322098 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.681354046 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.681370974 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.681370974 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.681376934 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.681384087 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.683357000 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.683396101 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.683480024 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.683487892 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.683490038 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.683620930 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.683649063 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:37.683681965 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.683756113 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:37.683767080 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.259964943 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.260478020 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.260528088 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.260965109 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.260982037 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.367046118 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.367490053 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.367522955 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.367899895 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.367913961 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.385238886 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.385901928 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.385901928 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.385929108 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.385962009 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.391180038 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.391196966 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.391285896 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.391290903 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.391355991 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.391504049 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.391526937 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.391572952 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.391586065 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.394150972 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.394179106 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.394299030 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.394407988 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.394418001 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.422735929 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.423047066 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.423058033 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.423448086 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.423453093 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.426300049 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.426989079 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.426989079 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.427011967 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.427062988 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.495034933 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.495081902 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.495269060 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.495269060 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.495347977 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.495373011 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.497240067 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.497253895 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.497411013 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.497469902 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.497476101 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.512141943 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.512201071 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.512388945 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.512389898 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.512389898 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.514126062 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.514144897 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.514224052 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.514333963 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.514343977 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.553494930 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.553543091 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.553721905 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.553723097 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.553808928 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.553813934 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.555629015 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.555664062 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.555787086 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.555915117 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.555942059 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.558497906 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.558547020 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.558715105 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.558715105 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.558790922 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.558804035 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.560583115 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.560640097 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.560801029 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.560905933 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.560937881 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:38.816917896 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:38.816948891 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.112505913 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.113001108 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.113019943 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.113435984 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.113440990 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.238430023 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.238744020 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.238755941 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.239182949 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.239188910 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.240164995 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.240464926 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.240474939 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.240854025 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.240858078 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.243474960 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.244596004 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.244647026 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.244700909 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.244713068 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.244729042 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.244733095 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.247370958 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.247411013 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.247486115 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.247610092 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.247639894 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.271161079 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.271464109 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.271481991 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.272077084 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.272087097 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.291699886 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.292007923 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.292046070 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.292435884 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.292467117 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.370436907 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.370491982 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.370603085 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.370737076 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.370748043 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.370757103 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.370762110 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.372123957 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.372164011 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.372222900 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.372385025 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.372400045 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.372412920 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.372417927 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.373684883 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.373732090 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.373812914 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.373955011 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.373982906 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.374732971 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.374752998 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.375025988 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.375144005 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.375149012 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.399117947 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.399380922 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.399440050 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.399485111 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.399485111 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.399507999 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.399528980 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.401299000 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.401329041 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.401412010 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.401561975 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.401573896 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.421967983 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.422039032 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.422105074 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.422204971 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.422229052 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.422255039 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.422270060 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.424150944 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.424161911 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.424298048 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.424412012 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.424426079 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.978961945 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.979468107 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.979537010 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:39.980104923 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:39.980123997 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.048620939 CET	443	49790	142.250.186.36	192.168.2.4
Oct 31, 2024 07:38:40.048671961 CET	443	49790	142.250.186.36	192.168.2.4
Oct 31, 2024 07:38:40.054254055 CET	49790	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:38:40.101546049 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.102761030 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.102962017 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.102986097 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.104521036 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.104527950 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.105390072 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.105436087 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.107193947 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.107235909 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.107239962 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.107250929 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.107759953 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.108030081 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.108030081 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.108073950 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.108117104 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.112752914 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.112790108 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.113002062 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.113337040 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.113354921 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.140434980 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.142329931 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.142329931 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.142338991 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.142353058 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.153779030 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.154619932 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.154629946 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.155714989 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.155720949 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.231447935 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.231472969 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.231547117 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.231585026 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.231622934 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.231627941 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.231678963 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.231715918 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.231897116 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.231897116 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.231906891 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.231916904 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.233715057 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.233743906 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.233783960 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.233798027 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.240111113 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.240114927 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.240145922 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.240180016 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.240272045 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.240274906 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.240650892 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.240663052 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.242048025 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.242083073 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.272988081 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.273025990 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.273061037 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.273169041 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.273169041 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.273407936 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.273425102 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.273564100 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.273570061 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.278049946 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.278080940 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.281184912 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.284066916 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.284094095 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.284806967 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.284859896 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.285089970 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.285305977 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.285310030 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.285336971 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.285341024 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.289906979 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.289917946 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.290040016 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.290406942 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.290416002 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.839562893 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.840790033 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.840801001 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.842322111 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.842331886 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.966514111 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.966948986 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.966964960 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.968014002 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.968018055 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.968122959 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.968183041 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.968230009 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.969189882 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.969199896 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.969209909 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.969213009 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.973628998 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.974528074 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.974550962 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.975574970 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.975581884 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.979039907 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.979053974 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:40.979125977 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.979731083 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:40.979739904 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.004112959 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.006201982 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.006212950 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.008263111 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.008268118 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.009601116 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.010452032 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.010461092 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.011363029 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.011368036 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.095463037 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.095494986 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.095541000 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.095545053 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.095607996 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.096616983 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.096622944 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.096666098 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.096669912 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.103523016 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.103574991 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.103655100 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.106286049 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.106326103 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.106395960 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.107368946 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.107382059 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.107394934 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.107407093 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.115211010 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.115220070 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.115291119 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.115768909 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.115787029 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.116650105 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.116660118 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.131278038 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.131371021 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.131422043 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.131629944 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.131634951 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.131643057 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.131648064 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.137466908 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.137540102 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.137604952 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.138214111 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.138225079 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.138286114 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.138326883 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.138331890 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.138350010 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.138354063 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.138497114 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.138513088 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.142221928 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.142241955 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.142303944 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.142786980 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.142802000 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.580193043 CET	49790	443	192.168.2.4	142.250.186.36
Oct 31, 2024 07:38:41.580208063 CET	443	49790	142.250.186.36	192.168.2.4
Oct 31, 2024 07:38:41.719845057 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.720774889 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.720792055 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.722040892 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.722044945 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.847006083 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.848292112 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.848305941 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.849587917 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.849626064 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.849632025 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.849638939 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.849795103 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.850220919 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.850220919 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.850233078 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.850239992 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.850577116 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.851151943 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.851151943 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.851169109 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.851176023 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.853780985 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.855524063 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.855559111 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.855803013 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.856332064 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.856357098 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.856774092 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.856781006 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.856818914 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.856833935 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.884430885 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.891165972 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.891189098 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.898036957 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.898042917 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.975802898 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.975828886 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.975873947 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.976073980 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.976294041 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.976308107 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.976341009 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.976347923 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.980317116 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.980336905 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.980344057 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.980376005 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.980376959 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.980487108 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.980490923 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.980556011 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.980871916 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.980879068 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.980915070 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.980920076 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.981791019 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.981885910 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.982043028 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.982418060 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.982434988 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.982614994 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.982614994 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.982626915 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.982634068 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.987020016 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.987037897 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.987042904 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.987122059 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.987217903 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.987226009 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.987514019 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.987529039 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:41.988065958 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:41.988096952 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.025002956 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.025295019 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.025681973 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.025755882 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.025755882 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.025763035 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.025774002 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.028574944 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.028657913 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.030113935 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.030390024 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.030428886 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.622042894 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.623255014 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.623280048 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.625014067 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.625019073 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.709584951 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.710001945 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.710012913 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.710756063 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.710761070 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.712485075 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.712934971 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.712975979 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.713488102 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.713501930 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.718822002 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.719157934 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.719172001 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.719856024 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.719861984 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.754940033 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.755374908 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.755403996 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.755768061 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.755774021 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.758595943 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.758640051 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.758698940 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.758918047 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.758932114 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.758940935 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.758945942 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.762168884 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.762203932 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.762289047 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.762474060 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.762492895 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.840879917 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.841041088 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.841073036 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.841108084 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.841171026 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.841312885 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.841312885 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.841351032 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.841387987 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.844528913 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.844589949 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.844672918 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.844878912 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.844909906 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.848191023 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.848233938 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.848284960 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.848551989 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.848560095 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.848570108 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.848573923 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.852186918 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.852217913 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.852286100 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.852472067 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.852483988 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.882297039 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.882366896 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.882432938 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.882729053 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.882750988 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.882780075 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.882807016 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.885546923 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.885586023 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:42.885658979 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.885864973 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:42.885883093 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.113862038 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.113924980 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.113975048 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.114379883 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.114392042 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.114403009 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.114408016 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.122498035 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.122513056 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.122567892 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.123116016 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.123126984 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.558274984 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.559020042 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.559052944 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.560384035 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.560390949 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.580233097 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.580420971 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.581127882 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.581161976 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.582139969 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.582154036 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.582726002 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.582743883 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.583736897 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.583744049 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.626687050 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.629192114 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.629209995 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.636049032 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.636054039 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.709975958 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.710000992 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.710036993 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.710366964 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.710694075 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.710751057 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.710889101 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.716895103 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.716895103 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.716936111 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.716962099 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.736352921 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.736363888 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.736394882 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.736402988 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.740180016 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.740207911 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.740293980 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.740777016 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.740792990 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.744493008 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.744580984 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.744704962 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.744884968 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.744931936 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.762141943 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.762284040 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.762392044 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.762451887 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.762460947 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.762492895 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.762499094 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.765553951 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.765584946 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.765736103 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.768047094 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.768063068 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.821372986 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.821427107 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.824748993 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.824748993 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.824804068 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.824817896 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.827716112 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.827795982 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:43.829138994 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.829333067 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:43.829368114 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.163527966 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.164344072 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.164370060 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.164529085 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.164535046 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.293261051 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.293433905 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.293555975 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.293555975 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.293622017 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.293631077 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.296174049 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.296224117 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.296396971 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.296477079 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.296490908 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.475233078 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.475720882 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.476176977 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.476196051 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.477200031 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.477207899 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.478599072 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.478600025 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.478662014 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.478715897 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.502271891 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.502701998 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.502741098 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.503201008 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.503227949 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.546576023 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.547219038 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.547278881 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.547748089 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.547761917 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.605170012 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.605189085 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.605223894 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.605243921 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.605285883 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.605443001 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.605458975 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.605470896 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.605475903 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.606261015 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.606662989 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.606859922 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.606947899 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.606947899 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.606992960 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.607019901 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.607963085 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.607983112 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.608182907 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.608326912 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.608342886 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.609436989 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.609467983 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.609525919 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.609658957 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.609668970 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.636012077 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.636159897 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.636271000 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.636271000 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.636347055 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.636384010 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.638243914 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.638257980 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.638320923 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.638456106 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.638469934 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.674935102 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.675019979 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.675081968 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.675163031 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.675204039 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.675235033 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.675251007 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.677046061 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.677057981 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:44.677110910 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.677191973 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:44.677200079 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.039632082 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.039982080 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.040008068 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.040438890 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.040445089 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.169924974 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.169985056 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.170083046 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.170150995 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.170190096 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.170209885 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.170222998 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.170229912 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.172219992 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.172255039 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.172406912 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.172544956 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.172563076 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.326497078 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.326801062 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.326827049 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.327136040 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.327145100 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.329087019 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.329456091 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.329477072 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.329761028 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.329765081 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.372773886 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.373089075 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.373099089 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.373414993 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.373420000 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.424640894 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.424941063 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.424952984 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.425254107 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.425257921 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.454566002 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.454616070 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.454663992 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.454802036 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.454813004 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.454847097 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.454854012 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.457113981 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.457145929 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.457211018 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.457331896 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.457344055 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.469410896 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.469435930 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.469466925 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.469484091 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.469516993 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.469609022 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.469624996 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.469635010 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.469640017 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.471756935 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.471816063 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.471894979 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.472002983 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.472038984 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.502149105 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.502290010 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.502407074 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.502439976 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.502448082 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.502458096 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.502463102 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.504297018 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.504308939 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.504375935 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.504532099 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.504542112 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.559381008 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.559403896 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.559442997 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.559453964 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.559485912 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.559561014 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.559578896 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.559591055 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.559595108 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.561484098 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.561515093 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.561587095 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.561703920 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.561717987 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.948390007 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.949184895 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.949184895 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:45.949202061 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:45.949219942 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.084604979 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.084752083 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.084862947 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.084862947 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.084928989 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.084954023 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.086843967 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.086875916 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.086990118 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.087073088 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.087085009 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.174664974 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.175389051 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.175389051 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.175406933 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.175417900 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.199954987 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.200393915 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.200413942 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.200685978 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.200696945 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.300884962 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.301618099 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.301618099 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.301640987 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.301649094 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.302716970 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.302742958 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.302776098 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.302809000 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.302835941 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.302992105 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.303004980 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.303031921 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.303035975 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.305275917 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.305294037 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.305469990 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.305552959 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.305562019 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.329718113 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.329762936 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.329885006 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.330025911 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.330045938 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.330084085 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.330097914 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.331960917 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.331990004 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.332149982 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.332237005 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.332247019 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.431602001 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.431647062 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.431725979 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.431866884 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.431874037 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.431921005 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.431925058 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.436079025 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.436111927 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.436682940 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.436820984 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.436830044 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.461241961 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.461771965 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.461796999 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.464279890 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.464287996 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.593188047 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.593251944 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.593369961 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.593396902 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.593462944 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.593550920 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.593550920 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.593563080 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.593575001 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.595527887 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.595604897 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.595741987 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.595804930 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.595833063 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.814981937 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.815352917 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.815368891 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.815771103 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.815785885 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.943243027 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.943407059 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.943552971 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.943552971 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.943579912 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.943594933 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.945961952 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.946017981 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:46.946254969 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.946254969 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:46.946319103 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.020114899 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.020488024 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.020502090 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.020878077 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.020884037 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.063884020 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.064258099 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.064270973 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.070058107 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.070061922 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.147741079 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.147826910 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.148040056 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.156564951 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.156574965 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.156605005 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.156610966 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.159121037 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.159161091 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.159307957 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.159431934 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.159446955 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.165410042 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.166227102 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.166256905 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.166471004 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.166485071 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.195385933 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.195410967 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.195449114 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.195580006 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.195637941 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.195691109 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.195691109 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.195702076 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.195713043 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.197916031 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.197946072 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.198118925 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.198147058 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.198156118 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.294116974 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.294178963 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.294444084 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.294461966 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.294517040 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.294557095 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.297029972 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.297065020 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.297190905 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.297353983 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.297367096 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.340996981 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.341382980 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.341408014 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.341826916 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.341833115 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.470297098 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.470356941 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.470449924 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.470540047 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.470540047 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.470604897 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.470618963 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.470649958 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.470659018 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.472634077 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.472652912 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.472728968 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.472887039 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.472901106 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.679786921 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.680406094 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.680428982 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.680644989 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.680655956 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.809088945 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.809168100 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.809245110 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.809364080 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.809402943 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.809443951 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.809459925 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.811856031 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.811896086 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.812067986 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.812146902 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.812155962 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.888078928 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.888756037 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.888756037 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.888773918 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.888792038 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.936578989 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.936965942 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.936991930 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:47.937410116 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:47.937417030 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.018239021 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.018304110 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.018460035 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.018512011 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.018512011 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.018531084 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.018541098 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.020744085 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.021244049 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.021265984 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.021680117 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.021749973 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.021791935 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.021796942 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.021836042 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.021965981 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.022001982 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.067485094 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.067538023 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.067955971 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.067955971 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.068016052 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.068032980 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.071371078 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.071405888 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.071615934 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.072444916 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.072457075 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.148519993 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.148540974 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.148576975 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.148597956 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.148715019 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.149005890 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.149018049 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.149043083 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.149048090 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.151724100 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.151746035 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.151842117 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.152152061 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.152167082 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.216367006 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.216830015 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.216845036 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.217493057 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.217499018 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.347985029 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.348140001 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.348256111 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.348256111 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.348323107 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.348334074 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.350725889 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.350756884 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.351144075 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.351144075 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.351169109 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.543725014 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.544187069 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.544208050 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.544636965 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.544641972 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.674073935 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.674144983 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.674278975 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.674324036 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.674455881 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.674606085 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.674617052 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.674645901 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.674649954 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.677279949 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.677305937 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.677671909 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.677671909 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.677700996 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.748049974 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.749037027 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.749037981 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.749070883 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.749084949 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.808814049 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.809278011 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.809300900 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.809684038 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.809689045 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.900137901 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.900985003 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.900985003 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.901020050 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.901072979 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.903502941 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.903584003 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.903697968 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.903758049 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.903783083 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.903822899 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.903836966 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.906424999 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.906444073 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.906636000 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.906636000 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.906656027 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.938782930 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.938822985 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.938900948 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.939028978 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.939028978 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.939043999 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.939054012 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.941183090 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.941200972 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:48.941385984 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.941385984 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:48.941407919 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:49.032200098 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:49.032267094 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:49.032354116 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:49.032558918 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:49.032558918 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:49.032582998 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:49.032603025 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:49.035115957 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:49.035145044 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 07:38:49.035259008 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:49.035367966 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 07:38:49.035387039 CET	443	49903	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 07:37:24.951886892 CET	53	51512	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:24.954324961 CET	53	61997	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:26.257144928 CET	53	61048	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:26.938040972 CET	53011	53	192.168.2.4	1.1.1.1
Oct 31, 2024 07:37:26.938534975 CET	64085	53	192.168.2.4	1.1.1.1
Oct 31, 2024 07:37:26.945439100 CET	53	64085	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:28.730689049 CET	53243	53	192.168.2.4	1.1.1.1
Oct 31, 2024 07:37:28.731376886 CET	57734	53	192.168.2.4	1.1.1.1
Oct 31, 2024 07:37:28.738394976 CET	53	53243	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:28.738600016 CET	53	57734	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:29.270920992 CET	52592	53	192.168.2.4	1.1.1.1
Oct 31, 2024 07:37:29.271352053 CET	62128	53	192.168.2.4	1.1.1.1
Oct 31, 2024 07:37:29.277697086 CET	53	52592	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:29.278378010 CET	53	62128	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:30.457015038 CET	50116	53	192.168.2.4	1.1.1.1
Oct 31, 2024 07:37:30.460124969 CET	49415	53	192.168.2.4	1.1.1.1
Oct 31, 2024 07:37:30.464287043 CET	53	50116	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:30.467547894 CET	53	49415	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:32.688052893 CET	56300	53	192.168.2.4	1.1.1.1
Oct 31, 2024 07:37:32.688282967 CET	61221	53	192.168.2.4	1.1.1.1
Oct 31, 2024 07:37:32.695259094 CET	53	56300	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:32.695385933 CET	53	61221	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:43.185139894 CET	53	64222	1.1.1.1	192.168.2.4
Oct 31, 2024 07:37:44.934043884 CET	138	138	192.168.2.4	192.168.2.255
Oct 31, 2024 07:38:02.389283895 CET	53	62038	1.1.1.1	192.168.2.4
Oct 31, 2024 07:38:24.782968044 CET	53	56928	1.1.1.1	192.168.2.4
Oct 31, 2024 07:38:25.002507925 CET	53	62273	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 07:37:26.938040972 CET	192.168.2.4	1.1.1.1	0xee13	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:26.938534975 CET	192.168.2.4	1.1.1.1	0x4a8b	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 31, 2024 07:37:28.730689049 CET	192.168.2.4	1.1.1.1	0x9e34	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:28.731376886 CET	192.168.2.4	1.1.1.1	0x81d0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 07:37:29.270920992 CET	192.168.2.4	1.1.1.1	0xabe0	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:29.271352053 CET	192.168.2.4	1.1.1.1	0xab96	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Oct 31, 2024 07:37:30.457015038 CET	192.168.2.4	1.1.1.1	0xe099	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:30.460124969 CET	192.168.2.4	1.1.1.1	0x520f	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
Oct 31, 2024 07:37:32.688052893 CET	192.168.2.4	1.1.1.1	0xe903	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:32.688282967 CET	192.168.2.4	1.1.1.1	0x4aa3	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 07:37:26.945069075 CET	1.1.1.1	192.168.2.4	0xee13	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:37:26.945069075 CET	1.1.1.1	192.168.2.4	0xee13	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:26.945069075 CET	1.1.1.1	192.168.2.4	0xee13	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:26.945069075 CET	1.1.1.1	192.168.2.4	0xee13	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:26.945069075 CET	1.1.1.1	192.168.2.4	0xee13	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:26.945069075 CET	1.1.1.1	192.168.2.4	0xee13	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:26.945069075 CET	1.1.1.1	192.168.2.4	0xee13	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:26.945069075 CET	1.1.1.1	192.168.2.4	0xee13	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:28.738394976 CET	1.1.1.1	192.168.2.4	0x9e34	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:28.738600016 CET	1.1.1.1	192.168.2.4	0x81d0	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 07:37:29.277697086 CET	1.1.1.1	192.168.2.4	0xabe0	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:37:29.277697086 CET	1.1.1.1	192.168.2.4	0xabe0	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:29.278378010 CET	1.1.1.1	192.168.2.4	0xab96	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:37:30.464287043 CET	1.1.1.1	192.168.2.4	0xe099	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:37:30.464287043 CET	1.1.1.1	192.168.2.4	0xe099	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:30.467547894 CET	1.1.1.1	192.168.2.4	0x520f	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:37:32.695259094 CET	1.1.1.1	192.168.2.4	0xe903	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:37:32.695259094 CET	1.1.1.1	192.168.2.4	0xe903	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:32.695385933 CET	1.1.1.1	192.168.2.4	0x4aa3	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:37:40.561593056 CET	1.1.1.1	192.168.2.4	0x76ce	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:37:40.561593056 CET	1.1.1.1	192.168.2.4	0x76ce	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:37:53.810357094 CET	1.1.1.1	192.168.2.4	0x27e8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:37:53.810357094 CET	1.1.1.1	192.168.2.4	0x27e8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:38:17.482785940 CET	1.1.1.1	192.168.2.4	0xc1ee	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:38:17.482785940 CET	1.1.1.1	192.168.2.4	0xc1ee	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:38:20.836292982 CET	1.1.1.1	192.168.2.4	0x628f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:38:20.836292982 CET	1.1.1.1	192.168.2.4	0x628f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 31, 2024 07:38:38.700125933 CET	1.1.1.1	192.168.2.4	0xb722	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 07:38:38.700125933 CET	1.1.1.1	192.168.2.4	0xb722	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ib.adnxs.com

dis.criteo.com

widget.us.criteo.com

fs.microsoft.com

https:

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	37.252.171.52	443	6096	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:37:28 UTC	732	OUT	GET /getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 06:37:28 UTC	1506	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 31 Oct 2024 06:37:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID AN-X-Request-Uuid: b4b80e50-cb18-44a1-8daa-b736c46632af Set-Cookie: XANDR_PANID=3jl2MYxko6V5JtkjTfIri44e3TEWHxHcULCO9CmpqHJ3uPQdmx1p2kMBK0-shtJCiNws1tYedMnX0vHKleXKTNlUbX_sODoozpBDrKZXQfI.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 29-Jan-2025 06:37:28 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 19-Oct-2034 06:37:28 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7888404678500780472; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 29-Jan-2025 06:37:28 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 173.254.250.77; 173.254.250.77; 1005.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	37.252.171.52	443	6096	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:37:28 UTC	1181	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3jl2MYxko6V5JtkjTfIri44e3TEWHxHcULCO9CmpqHJ3uPQdmx1p2kMBK0-shtJCiNws1tYedMnX0vHKleXKTNlUbX_sODoozpBDrKZXQfI.; receive-cookie-deprecation=1; uuid2=7888404678500780472
2024-10-31 06:37:29 UTC	1455	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 31 Oct 2024 06:37:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472 AN-X-Request-Uuid: 1341673a-495b-44d5-9c0e-63946d273e90 Set-Cookie: XANDR_PANID=3jl2MYxko6V5JtkjTfIri44e3TEWHxHcULCO9CmpqHJ3uPQdmx1p2kMBK0-shtJCiNws1tYedMnX0vHKleXKTNlUbX_sODoozpBDrKZXQfI.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 29-Jan-2025 06:37:29 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 19-Oct-2034 06:37:29 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7888404678500780472; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 29-Jan-2025 06:37:29 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 173.254.250.77; 173.254.250.77; 1005.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	178.250.1.9	443	6096	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:37:30 UTC	719	OUT	GET /dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 06:37:30 UTC	316	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 31 Oct 2024 06:37:29 GMT server: Kestrel location: https://widget.us.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472 server-processing-duration-in-ticks: 69681 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:37:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 06:37:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=209292 Date: Thu, 31 Oct 2024 06:37:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	74.119.117.16	443	6096	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:37:31 UTC	725	OUT	GET /dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472 HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 06:37:31 UTC	448	IN	HTTP/1.1 200 OK content-type: image/gif date: Thu, 31 Oct 2024 06:37:30 GMT server: Kestrel cache-control: no-cache expires: Mon, 26 Jul 1997 05:00:00 GMT pragma: no-cache transfer-encoding: chunked cross-origin-resource-policy: cross-origin p3p: CP='NON DSP COR CURa PSA PSD OUR BUS NAV STA' timing-allow-origin: * server-processing-duration-in-ticks: 188431 strict-transport-security: max-age=31536000; preload; connection: close
2024-10-31 06:37:31 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:37:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 06:37:32 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=209347 Date: Thu, 31 Oct 2024 06:37:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 06:37:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	74.119.117.16	443	6096	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:37:32 UTC	658	OUT	GET /favicon.ico HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://widget.us.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=7888404678500780472 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 06:37:32 UTC	538	IN	HTTP/1.1 200 OK server: nginx date: Thu, 31 Oct 2024 06:37:32 GMT content-type: text/plain; charset=UTF-8 content-length: 1406 last-modified: Tue, 01 Jul 2008 08:24:36 GMT etag: "4869e9c4-57e" expires: Sun, 26 Oct 2025 06:37:32 GMT cache-control: max-age=31104000 cache-control: public timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-10-31 06:37:32 UTC	1406	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 00 00 00 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 76 d7 00 47 54 5e 00 24 64 99 00 12 6d b8 00 35 5c 7c 00 3e 58 6d 00 1a 69 a9 00 50 50 50 00 09 71 c6 00 2c 60 8b 00 04 74 cf 00 0e 6f bf 00 42 56 66 00 1e 67 a2 00 31 5e 83 00 28 62 92 00 4b 52 58 00 3a 5a 73 00 38 5b 78 00 07 72 ca 00 4d 51 54 00 14 6c b4 00 0b 70 c3 00 45 55 61 00 10 6e bb 00 1c 68 a6 00 26 63 96 00 2a 61 8e 00 02 74 d2 00 41 57 69 00 49 53 5a 00 20 66 a0 00 01 75 d5 00 4e 50 52 00 05 73 cd 00 3f 57 6b 00 3b 59 71 00 39 5a 76 00 32 5d 81 00 4c 51 56 00 0d 6f c1 00 48 53 5c 00 0e 6e bd 00 3d 58 6f 00 36 5c 7a 00 27 63 94 00 1e Data Ascii: h( @vGT^$dm5\\|>XmiPPPq,`toBVfg1^(bKRX:Zs8[xrMQTlpEUanh&c*atAWiISZ fuNPRs?Wk;Yq9Zv2]LQVoHS\n=Xo6\z'c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	74.119.117.16	443	6096	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:37:33 UTC	355	OUT	GET /favicon.ico HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 06:37:33 UTC	538	IN	HTTP/1.1 200 OK server: nginx date: Thu, 31 Oct 2024 06:37:33 GMT content-type: text/plain; charset=UTF-8 content-length: 1406 last-modified: Tue, 01 Jul 2008 08:24:36 GMT etag: "4869e9c4-57e" expires: Sun, 26 Oct 2025 06:37:33 GMT cache-control: max-age=31104000 cache-control: public timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-10-31 06:37:33 UTC	1406	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 00 00 00 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 76 d7 00 47 54 5e 00 24 64 99 00 12 6d b8 00 35 5c 7c 00 3e 58 6d 00 1a 69 a9 00 50 50 50 00 09 71 c6 00 2c 60 8b 00 04 74 cf 00 0e 6f bf 00 42 56 66 00 1e 67 a2 00 31 5e 83 00 28 62 92 00 4b 52 58 00 3a 5a 73 00 38 5b 78 00 07 72 ca 00 4d 51 54 00 14 6c b4 00 0b 70 c3 00 45 55 61 00 10 6e bb 00 1c 68 a6 00 26 63 96 00 2a 61 8e 00 02 74 d2 00 41 57 69 00 49 53 5a 00 20 66 a0 00 01 75 d5 00 4e 50 52 00 05 73 cd 00 3f 57 6b 00 3b 59 71 00 39 5a 76 00 32 5d 81 00 4c 51 56 00 0d 6f c1 00 48 53 5c 00 0e 6e bd 00 3d 58 6f 00 36 5c 7a 00 27 63 94 00 1e Data Ascii: h( @vGT^$dm5\\|>XmiPPPq,`toBVfg1^(bKRX:Zs8[xrMQTlpEUanh&c*atAWiISZ fuNPRs?Wk;Yq9Zv2]LQVoHS\n=Xo6\z'c

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:21 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:21 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:21 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 93e60446-901e-00a0-4f32-2a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063821Z-159b85dff8f7x84jhC1DFWaghs000000010g0000000010tu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:21 UTC	15869	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-31 06:38:21 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 Data Ascii: <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L>
2024-10-31 06:38:21 UTC	16384	IN	Data Raw: 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 Data Ascii: </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns="">
2024-10-31 06:38:22 UTC	16384	IN	Data Raw: 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 Data Ascii: N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_C
2024-10-31 06:38:22 UTC	16384	IN	Data Raw: 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 Data Ascii: eateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPer
2024-10-31 06:38:22 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 Data Ascii: > </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="2
2024-10-31 06:38:22 UTC	16384	IN	Data Raw: 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c Data Ascii: liseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L
2024-10-31 06:38:22 UTC	16384	IN	Data Raw: 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 Data Ascii: "I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedC
2024-10-31 06:38:22 UTC	16384	IN	Data Raw: 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 Data Ascii: <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="
2024-10-31 06:38:22 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 Data Ascii: <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:23 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:24 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:23 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063823Z-16849878b78qwx7pmw9x5fub1c00000007b00000000050b3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:24 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:23 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:23 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063823Z-16849878b78qg9mlz11wgn0wcc00000008tg000000004nm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:24 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:23 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063823Z-16849878b78qfbkc5yywmsbg0c00000008ug000000008ft0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:24 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:23 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063823Z-15b8d89586f5s5nz3ffrgxn5ac00000009v0000000009rh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:24 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:23 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:24 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:23 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3be177bf-d01e-007a-546e-28f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063823Z-15b8d89586fnfb49yv03rfgz1c00000000rg00000000ammz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:24 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:24 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 070d1cb7-b01e-0084-2b6b-2ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063824Z-159b85dff8fq4v8mhC1DFW70kw00000001gg00000000fr2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:24 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063824Z-16849878b78sx229w7g7at4nkg000000079000000000mvct x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:24 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:24 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: fc05dcd0-301e-0052-2d91-2a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063824Z-17c5cb586f6ks725u50g36qts800000001bg0000000000et x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:24 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 045b826b-001e-0014-04b7-2a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063824Z-159b85dff8flqhxthC1DFWsvrs000000013g00000000487b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:24 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063824Z-16849878b78wv88bk51myq5vxc00000009hg0000000009hy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:24 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:25 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f66eff46-601e-0084-3c9d-276b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063825Z-15b8d89586f6nn8zqg1h5suba800000004eg000000003knd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:25 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063825Z-16849878b7828dsgct3vrzta7000000007mg000000005e9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:25 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063825Z-16849878b78tg5n42kspfr0x48000000093000000000g769 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:25 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 1d60da59-401e-002a-5eef-2ac62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063825Z-15b8d89586fqj7k5h9gbd8vs980000000ab00000000077dy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:25 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 73421f5c-b01e-001e-1796-2a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063825Z-159b85dff8fbbwhzhC1DFWwpe800000001kg000000001rv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:26 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:26 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 89d7e9f4-d01e-0066-46a8-2aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063826Z-16849878b78xblwksrnkakc08w00000008ag00000000fs36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:26 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:26 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063826Z-16849878b786fl7gm2qg4r5y7000000009hg0000000004zk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:26 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 360ad152-001e-0079-6bbd-2a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063826Z-159b85dff8fj5jwshC1DFW3rgc00000000u000000000bbh5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:26 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:26 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063826Z-16849878b78qwx7pmw9x5fub1c00000007d0000000000evb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:26 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:26 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:26 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063826Z-16849878b78x44pv2mpb0dd37w0000000180000000009d5p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:26 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:27 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 862c7620-501e-0029-4f4f-29d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063827Z-15b8d89586fxdh48ft0acdbg44000000031g000000001qx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:27 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 338c7fbe-d01e-0028-7d3c-287896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063827Z-15b8d89586ffsjj9qb0gmb1stn0000000d9000000000b621 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:27 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:27 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063827Z-16849878b78j7llf5vkyvvcehs0000000ab0000000000vn0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:27 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:27 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063827Z-15b8d89586f6nn8zqg1h5suba800000004ag00000000as31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:27 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:27 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 03fc6633-801e-0048-4d87-29f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063827Z-17c5cb586f64sw5wh0dfzbdtvw000000018000000000cy5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:27 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:28 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:28 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 283bb1f9-001e-0066-5cf3-2a561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063828Z-15b8d89586fnfb49yv03rfgz1c00000000r000000000bu82 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:28 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:28 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 5dc1b391-401e-0029-66c0-2a9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063828Z-159b85dff8fbbwhzhC1DFWwpe800000001e000000000bqhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:28 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063828Z-16849878b78hh85qc40uyr8sc800000009b000000000grbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:28 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063828Z-16849878b78qg9mlz11wgn0wcc00000008n000000000kup7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:28 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:28 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063828Z-16849878b78j7llf5vkyvvcehs0000000aag000000001s04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:28 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:29 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:29 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063829Z-16849878b786fl7gm2qg4r5y7000000009fg000000004xc8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:29 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:29 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 2a43884c-b01e-0098-517c-2acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063829Z-15b8d89586fwzdd88qtcg4dr18000000018g00000000cp7a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:29 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063829Z-16849878b782d4lwcu6h6gmxnw00000008v0000000007g24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:29 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 3b7c5db9-101e-0046-71c7-2791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063829Z-15b8d89586fvpb59307bn2rcac00000004800000000094nd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:29 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:29 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5cde4d2e-001e-0046-6764-2ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063829Z-17c5cb586f6lxnvgvs6hx6p0t8000000018g000000002pgy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:29 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:30 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:30 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063830Z-16849878b78j5kdg3dndgqw0vg0000000as000000000ng6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:30 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:30 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:30 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063830Z-16849878b78wv88bk51myq5vxc00000009b000000000hmk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:30 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:30 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: f3394f62-601e-0070-07f3-2aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063830Z-15b8d89586fqj7k5h9gbd8vs980000000ac0000000005dmb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:30 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:30 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063830Z-16849878b782d4lwcu6h6gmxnw00000008v0000000007g2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:30 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:30 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:30 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063830Z-16849878b78nzcqcd7bed2fb6n00000001k000000000bwg4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:30 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:30 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:30 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 11245d39-601e-0070-68de-2aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063830Z-159b85dff8fbbwhzhC1DFWwpe800000001kg000000001s24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:31 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:30 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:30 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063830Z-15b8d89586fmc8ck21zz2rtg1w00000006eg000000004neh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:31 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:30 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:30 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063830Z-16849878b78p8hrf1se7fucxk80000000a0g00000000a0mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:31 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:30 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:31 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e113be9f-801e-0035-547f-2a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063831Z-17c5cb586f62bgw58esgbu9hgw00000001v0000000007yre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:31 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:31 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:31 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 15771578-b01e-0001-6504-2b46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063831Z-15b8d89586fnfb49yv03rfgz1c00000000tg000000007mn8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:31 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:31 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:31 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:31 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a606ba7c-601e-003d-0781-2a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063831Z-17c5cb586f6r59nt4rzfbx40ys000000019000000000f5zx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-31 06:38:31 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:31 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:31 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063831Z-16849878b78nzcqcd7bed2fb6n00000001hg00000000c4fc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:31 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:31 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:31 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0697abc8-001e-00ad-714f-28554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063831Z-15b8d89586flzzksdx5d6q7g10000000047g00000000a2bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:31 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:31 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063831Z-16849878b782d4lwcu6h6gmxnw00000008x0000000002w1c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:31 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:32 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: dca3eddb-501e-008c-6f6b-2acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063831Z-17c5cb586f69dpr98vcd9da8e800000000r0000000000mnf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:32 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:32 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:32 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063832Z-16849878b78j7llf5vkyvvcehs0000000a7000000000an4b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:32 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063833Z-15b8d89586fnsf5zkvx8tfb0zc00000004d0000000001az0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:32 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a9b9ee84-f01e-001f-7a95-2a5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063833Z-159b85dff8f7svrvhC1DFWth2s000000014g0000000010ad x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:32 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 6ea723eb-b01e-003e-2efb-2a8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063833Z-15b8d89586fvpb59307bn2rcac000000047g00000000aekt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:32 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 64f5c2f9-201e-000c-22cd-2a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063833Z-159b85dff8f9mtxchC1DFWf9vg00000000d000000000007p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:33 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:33 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 1048e377-301e-0000-11d0-2aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063833Z-17c5cb586f626sn8grcgm1gf8000000007rg000000001wt3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:33 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:34 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ea7dc698-001e-0066-60bf-2a561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063834Z-15b8d89586f8nxpt6ys645x5v00000000af0000000005773 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:34 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:34 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 0944ca5a-501e-007b-292d-275ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063834Z-17c5cb586f6sqz6f73fsew1zd800000002ug00000000c7te x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:34 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:34 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:34 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 24f20e23-801e-0078-0539-2bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063834Z-15b8d89586fmhkw429ba5n22m80000000ap0000000006nwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:34 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:34 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:34 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063834Z-16849878b7867ttgfbpnfxt44s00000008y000000000gq64 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:34 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:34 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: a0c84568-901e-0016-0da6-2aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063834Z-159b85dff8fsgrl7hC1DFWadan00000001v0000000001gph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:34 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:34 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063834Z-16849878b78j5kdg3dndgqw0vg0000000ay0000000003hxs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:35 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:34 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:34 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 78dfd7f1-001e-0034-02ca-2add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063834Z-16849878b78km6fmmkbenhx76n00000008c000000000pnww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:35 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:34 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063834Z-16849878b78j5kdg3dndgqw0vg0000000as000000000ngd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:35 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:34 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:35 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 08cfea9b-401e-0016-38cc-2a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063835Z-159b85dff8fx9jp8hC1DFWp25400000000y0000000009zh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:35 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:35 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bf07d5f0-e01e-0020-6ed9-2ade90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063835Z-159b85dff8f7lrfphC1DFWfw0800000000x000000000cgea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:35 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:35 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 32406b86-f01e-0099-067b-2a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063835Z-159b85dff8fgxq4qhC1DFWxa0n00000001c000000000bwma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:35 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:35 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063835Z-15b8d89586flzzksdx5d6q7g1000000004ag000000005gd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:35 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:35 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063835Z-16849878b7867ttgfbpnfxt44s0000000930000000002tq0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:35 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:35 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:35 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e6885a93-401e-0078-5ec2-2a4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063835Z-17c5cb586f64sw5wh0dfzbdtvw00000001ag000000007bvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:35 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:36 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063836Z-15b8d89586fnsf5zkvx8tfb0zc00000004d0000000001b1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:36 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063836Z-16849878b78smng4k6nq15r6s40000000an000000000cg75 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:36 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:36 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063836Z-16849878b782d4lwcu6h6gmxnw00000008ug000000008rkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:36 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:36 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:36 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: f410ee1c-401e-0047-3649-2b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063836Z-17c5cb586f62bgw58esgbu9hgw00000001w0000000006ra3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:36 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:36 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: d871491f-101e-0046-2593-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063836Z-17c5cb586f6hn8cl90dxzu28kw00000009gg0000000009u1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:37 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:37 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063837Z-16849878b78x6gn56mgecg60qc0000000b200000000014ug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:37 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:37 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:37 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c3c63728-001e-0082-75c8-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063837Z-17c5cb586f6p5pndayxh2uxv5400000000u0000000005a80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:37 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:37 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:37 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063837Z-16849878b78bjkl8dpep89pbgg00000007u000000000cxb6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:37 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:37 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:37 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:37 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063837Z-16849878b7867ttgfbpnfxt44s000000094g00000000005g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:37 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:37 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:37 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063837Z-15b8d89586fmc8ck21zz2rtg1w00000006ag00000000dm3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:37 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:38 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:38 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:38 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 69a14025-c01e-000b-6685-2ae255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063838Z-159b85dff8f46f6ghC1DFW1p0n00000001e0000000005qgh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:38 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:38 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:38 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8964bec7-001e-005a-3570-2ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063838Z-159b85dff8fgc78phC1DFWd3vs00000000wg00000000ak3w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:38 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:38 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 888f89be-701e-0001-21d9-2ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063838Z-15b8d89586ffsjj9qb0gmb1stn0000000dd0000000004p38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:38 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:38 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:38 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063838Z-16849878b78x6gn56mgecg60qc0000000b10000000003pnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:38 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:38 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063838Z-16849878b78zqkvcwgr6h55x9n00000008pg0000000035hc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:39 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063839Z-16849878b78j7llf5vkyvvcehs0000000a3g00000000mnve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:39 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:39 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 5c8c4e1d-601e-0002-3bca-2aa786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063839Z-17c5cb586f6lxnvgvs6hx6p0t8000000019g0000000019b6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:39 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:39 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:39 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: f3cd1c79-a01e-0032-01bf-2a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063839Z-159b85dff8fbbwhzhC1DFWwpe800000001m0000000000xmd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:39 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:39 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 41496f62-601e-00ab-428f-2a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063839Z-17c5cb586f6ks725u50g36qts800000001800000000069cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:39 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:39 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:39 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063839Z-16849878b78smng4k6nq15r6s40000000aqg00000000626b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:39 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:39 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:40 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: f21e1abf-101e-00a2-2367-289f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063840Z-15b8d89586fbmg6qpd9yf8zhm0000000044g000000003mwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:40 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:40 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:40 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063840Z-15b8d89586f5s5nz3ffrgxn5ac00000009wg000000007ehr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:40 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:40 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:40 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063840Z-16849878b7828dsgct3vrzta7000000007pg000000001abe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:40 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:40 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:40 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063840Z-16849878b78x6gn56mgecg60qc0000000b000000000062u7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:40 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:40 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:40 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063840Z-16849878b787bfsh7zgp804my400000007yg000000008rmy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:40 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:40 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:40 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: fae3f4c7-d01e-0017-0559-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063840Z-15b8d89586fvpb59307bn2rcac000000047g00000000aerw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:40 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:40 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:41 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 7be90567-f01e-00aa-3367-2a8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063841Z-159b85dff8f7svrvhC1DFWth2s000000010g000000007s83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:40 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063841Z-16849878b78qf2gleqhwczd21s000000098g00000000grek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:41 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:41 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:41 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: f0ac2fb9-601e-003e-0667-2a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063841Z-159b85dff8f2qnk7hC1DFWwb2400000001w0000000002z6c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:41 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:41 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: d6c962a3-601e-0050-3d78-2a2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063841Z-17c5cb586f62vrfquq10qybcuw000000023000000000agw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:41 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 95bc9e17-201e-0051-77f2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063841Z-15b8d89586f8l5961kfst8fpb00000000n4g000000001f19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:41 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:41 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a5effc23-101e-0028-0ef8-2a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063841Z-15b8d89586flzzksdx5d6q7g10000000046000000000d7d1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:41 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:41 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:41 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 93439f28-801e-00ac-63f6-2afd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063841Z-15b8d89586f8nxpt6ys645x5v00000000agg0000000021d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:41 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:41 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:41 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b92dace7-601e-0097-311b-29f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063841Z-15b8d89586fbmg6qpd9yf8zhm0000000045g0000000037sn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:41 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:41 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:41 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063841Z-16849878b78nzcqcd7bed2fb6n00000001kg00000000bgeh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:42 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:42 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:42 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a88111ac-001e-0034-692b-2add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063842Z-15b8d89586fpccrmgpemqdqe580000000440000000001sqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:42 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:42 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:43 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:43 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 665b4a83-c01e-0014-16c7-2aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063842Z-159b85dff8f46f6ghC1DFW1p0n00000001dg0000000068yh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:43 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:42 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:42 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: b03ac640-101e-007a-1bc8-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063842Z-17c5cb586f6f8m6jnehy0z65x400000008mg0000000002q9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:42 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:42 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:42 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 141f8a5a-601e-000d-3b74-272618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063842Z-16849878b78qfbkc5yywmsbg0c00000008tg00000000bt90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:42 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:42 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:42 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063842Z-16849878b78qwx7pmw9x5fub1c00000007cg000000001cek x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:43 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:43 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7f3b7c7e-d01e-0049-3ec5-2ae7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063843Z-17c5cb586f6tg7hbbt0rp19dan00000001a000000000htnr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:43 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:43 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063843Z-16849878b78zqkvcwgr6h55x9n00000008r000000000071y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:43 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:43 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: c633743c-801e-007b-7ea5-2ae7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063843Z-17c5cb586f6sqz6f73fsew1zd8000000030g0000000000nb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:43 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:43 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063843Z-16849878b78qwx7pmw9x5fub1c00000007cg000000001cez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:43 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:44 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:44 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4113dc96-c01e-008e-5a2a-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063844Z-16849878b78zqkvcwgr6h55x9n00000008ng000000005ypm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:44 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:44 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:44 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:44 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: fae51377-601e-0002-1366-2aa786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063844Z-159b85dff8fvjwrdhC1DFWsn1000000000vg000000008ev9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:44 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:44 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:44 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:44 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c91dfad3-401e-0015-1dd2-2a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063844Z-17c5cb586f64sw5wh0dfzbdtvw000000017g00000000ebwb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:44 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:44 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:44 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:44 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063844Z-16849878b78zqkvcwgr6h55x9n00000008q00000000027x1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:44 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:44 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:44 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:44 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063844Z-16849878b78wc6ln1zsrz6q9w800000008x000000000362b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:44 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:45 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:45 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:45 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 73d124ed-101e-0017-3159-2b47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063845Z-17c5cb586f69dpr98vcd9da8e800000000g0000000006mrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:45 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:45 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:45 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:45 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 35f8d799-001e-0079-2cb8-2a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063845Z-159b85dff8flqhxthC1DFWsvrs0000000130000000004s5e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:45 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:45 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:45 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:45 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 697a147b-e01e-0071-71c8-2a08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063845Z-159b85dff8f5bl2qhC1DFWs6cn000000015g0000000023v3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:45 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:45 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:45 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:45 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063845Z-16849878b78j7llf5vkyvvcehs0000000a80000000008c80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:45 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:45 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:45 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 3b873659-401e-0067-0d93-2909c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063845Z-17c5cb586f6wmhkn5q6fu8c5ss00000008mg000000008m2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:45 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:45 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:45 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063845Z-16849878b78wv88bk51myq5vxc00000009d000000000av2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:46 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:46 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:46 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:46 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: c9775f7b-401e-0016-2424-2a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063846Z-159b85dff8fsgrl7hC1DFWadan00000001v0000000001gz1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:46 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:46 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:46 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: c49cf7be-b01e-0002-3880-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063846Z-16849878b78p8hrf1se7fucxk80000000a3g000000002cax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:46 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:46 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:46 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 135a34dd-b01e-0098-371c-27cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063846Z-17c5cb586f6lxnvgvs6hx6p0t8000000018g000000002pww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:46 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:46 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:46 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063846Z-16849878b78g2m84h2v9sta29000000007zg00000000h5d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:46 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:46 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:46 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063846Z-16849878b78sx229w7g7at4nkg00000007bg00000000bvef x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:46 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:47 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:47 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 38943712-901e-002a-666e-2a7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063847Z-159b85dff8fbbwhzhC1DFWwpe800000001kg000000001sbc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:47 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:47 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063847Z-15b8d89586f6nn8zqg1h5suba8000000049000000000e5gf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:47 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:47 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:47 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063847Z-16849878b78fkwcjkpn19c5dsn000000087g000000003dbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:47 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:47 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:47 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 97a405ee-b01e-001e-60eb-2a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063847Z-15b8d89586fst84kttks1s2css00000002s000000000c4vb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:47 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:47 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:47 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: d6a1c2a7-101e-0079-31ea-2a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063847Z-16849878b786fl7gm2qg4r5y7000000009hg0000000005n6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:47 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:47 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:47 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063847Z-16849878b78qwx7pmw9x5fub1c000000077000000000fvwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:48 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:47 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:48 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063848Z-16849878b787bfsh7zgp804my40000000800000000004h33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:48 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:48 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:48 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 623250e5-d01e-00ad-1e9c-27e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063848Z-16849878b78bjkl8dpep89pbgg00000007vg000000008g8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:48 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:48 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:48 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 8e66950d-f01e-0003-769c-274453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063848Z-15b8d89586fnsf5zkvx8tfb0zc000000049g000000007pay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:48 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:48 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:48 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:48 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 4793369b-901e-0029-7256-2b274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063848Z-15b8d89586fhl2qtatrz3vfkf00000000ffg000000006ss0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 06:38:48 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 06:38:48 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 06:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 06:38:48 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: c9277d07-501e-0047-62ae-24ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T063848Z-15b8d89586fmhkw429ba5n22m80000000as0000000002165 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 06:38:48 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3452, Parent PID: 1892

General

Target ID:	0
Start time:	02:37:18
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6096, Parent PID: 3452

General

Target ID:	2
Start time:	02:37:22
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=2028,i,7827939660576792006,6226119586176521499,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6404, Parent PID: 1892

General

Target ID:	3
Start time:	02:37:25
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 40

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3452, Parent PID: 1892

General

Chronological Activities

Analysis Process: chrome.exePID: 6096, Parent PID: 3452

General

Chronological Activities

Analysis Process: chrome.exePID: 6404, Parent PID: 1892

General

Chronological Activities

Disassembly

Windows Analysis Report
https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID