Edit tour

Windows Analysis Report
https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1

Overview

General Information

Sample URL:	https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1
Analysis ID:	1525991
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2348,i,16853621114823099383,12432706286696347133,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49772 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1 HTTP/1.1Host: cqn-k04.na1.hs-sales-engage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: cqn-k04.na1.hs-sales-engage.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: cqn-k04.na1.hs-sales-engage.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: cqn-k04.na1.hs-sales-engage.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49772 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/3@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2348,i,16853621114823099383,12432706286696347133,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2348,i,16853621114823099383,12432706286696347133,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
cqn-k04.na1.hs-sales-engage.com	104.18.38.91	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cqn-k04.na1.hs-sales-engage.com/favicon.ico	false		unknown
https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.38.91	cqn-k04.na1.hs-sales-engage.com	United States	13335	CLOUDFLARENETUS	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525991
Start date and time:	2024-10-04 17:01:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/3@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.251.173.84, 142.250.186.46, 34.104.35.123, 4.245.163.56, 199.232.214.172, 40.69.42.241, 192.229.221.95, 20.3.187.198, 142.250.74.195
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	4.098374828740337
Encrypted:	false
SSDEEP:	12:rpBEuxwiVLvIUJMv+IaKpizbWaj5Hu7Vui+cAypA49+5zn:RxFFJRn0i3dj5Hu7VxCvz
MD5:	08E39CE1D114C522769B593C41A24E26
SHA1:	46C7134E5C588B9723986216FCB862E4F64D25E8
SHA-256:	3EB8B279662B88CE416080184800862D55944E6461B1D09D0523D09173F300DA
SHA-512:	C47A87EA8A9D1DCB087A1972AF8BDE1C3D9FF38F5CA1E85582A88EB48A31A88CD658A3A32DC1468956F337607F27E7499E04A33C63E5CBB3EE80AF1AE1F2FBA8
Malicious:	false
Reputation:	low
URL:	https://cqn-k04.na1.hs-sales-engage.com/favicon.ico
Preview:	............ .h.......(....... ..... ....................................................Y.n..(..........................................................P$....u..............................................................x...x...........................................................].r..P..P....g............................................8....n...p...o...n..@......................................~..~.n..`..........Z...n.....}................................,....r...................q...x..................................2....r...................p...z.....................................u.n..N........+F...n.....o.....................................\|...n...n...n...n..P....................................."2...*.....d".........P...................................^.t..\..........L..`.............................2...:X...r.....a............$...,..........................].n...n.."......0...............j.n...n.....`................d.......n..p.....................(..

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	4.098374828740337
Encrypted:	false
SSDEEP:	12:rpBEuxwiVLvIUJMv+IaKpizbWaj5Hu7Vui+cAypA49+5zn:RxFFJRn0i3dj5Hu7VxCvz
MD5:	08E39CE1D114C522769B593C41A24E26
SHA1:	46C7134E5C588B9723986216FCB862E4F64D25E8
SHA-256:	3EB8B279662B88CE416080184800862D55944E6461B1D09D0523D09173F300DA
SHA-512:	C47A87EA8A9D1DCB087A1972AF8BDE1C3D9FF38F5CA1E85582A88EB48A31A88CD658A3A32DC1468956F337607F27E7499E04A33C63E5CBB3EE80AF1AE1F2FBA8
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ....................................................Y.n..(..........................................................P$....u..............................................................x...x...........................................................].r..P..P....g............................................8....n...p...o...n..@......................................~..~.n..`..........Z...n.....}................................,....r...................q...x..................................2....r...................p...z.....................................u.n..N........+F...n.....o.....................................\|...n...n...n...n..P....................................."2...*.....d".........P...................................^.t..\..........L..`.............................2...:X...r.....a............$...,..........................].n...n.."......0...............j.n...n.....`................d.......n..p.....................(..

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 4, 2024 17:02:32.228993893 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 4, 2024 17:02:36.048397064 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.048441887 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.048530102 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.048806906 CEST	49736	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.048851013 CEST	443	49736	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.048907042 CEST	49736	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.049129009 CEST	49736	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.049149990 CEST	443	49736	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.049309015 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.049324989 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.530900955 CEST	443	49736	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.532574892 CEST	49736	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.532598972 CEST	443	49736	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.533586979 CEST	443	49736	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.533664942 CEST	49736	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.533875942 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.535039902 CEST	49736	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.535125971 CEST	443	49736	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.535295010 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.535317898 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.535500050 CEST	49736	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.535506964 CEST	443	49736	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.536226988 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.536289930 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.537286997 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.537344933 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.587770939 CEST	49736	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.595788956 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.595835924 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.646294117 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.738918066 CEST	443	49736	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.739021063 CEST	443	49736	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.739161968 CEST	49736	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.746058941 CEST	49736	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.746078968 CEST	443	49736	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.811212063 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.855406046 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.968732119 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.969038963 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.969099998 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.971069098 CEST	49735	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.971105099 CEST	443	49735	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.998817921 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.998874903 CEST	443	49738	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:36.999013901 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.999376059 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:36.999401093 CEST	443	49738	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:37.459604979 CEST	443	49738	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:37.508645058 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:37.538925886 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:37.538974047 CEST	443	49738	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:37.540266991 CEST	443	49738	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:37.540345907 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:37.587563992 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:37.587750912 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:37.587774038 CEST	443	49738	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:37.633654118 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:37.633685112 CEST	443	49738	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:37.680521965 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:38.037347078 CEST	443	49738	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:38.037441015 CEST	443	49738	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:38.037494898 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:38.047868967 CEST	49738	443	192.168.2.4	104.18.38.91
Oct 4, 2024 17:02:38.047908068 CEST	443	49738	104.18.38.91	192.168.2.4
Oct 4, 2024 17:02:38.844681978 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 4, 2024 17:02:38.844750881 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 4, 2024 17:02:38.844814062 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 4, 2024 17:02:38.845211983 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 4, 2024 17:02:38.845228910 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 4, 2024 17:02:39.595455885 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 4, 2024 17:02:39.636210918 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 4, 2024 17:02:39.636241913 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 4, 2024 17:02:39.637569904 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 4, 2024 17:02:39.637795925 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 4, 2024 17:02:39.640763998 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 4, 2024 17:02:39.640888929 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 4, 2024 17:02:39.673799038 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:39.673897028 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:39.674021006 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:39.677099943 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:39.677143097 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:39.681132078 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 4, 2024 17:02:39.681195021 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 4, 2024 17:02:39.728188038 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 4, 2024 17:02:40.324453115 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:40.324563980 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:40.328501940 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:40.328531981 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:40.328866005 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:40.368571997 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:40.372612000 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:40.419401884 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:40.596519947 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:40.596688986 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:40.596760988 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:40.602221966 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:40.602261066 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:40.602279902 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:40.602293015 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:40.764400959 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:40.764481068 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:40.764560938 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:40.765392065 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:40.765408039 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:41.430928946 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:41.433598995 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:41.433598995 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:41.433638096 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:41.433964014 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:41.437053919 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:41.479463100 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:41.714257956 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:41.714350939 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:41.714821100 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:41.715307951 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:41.715307951 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 4, 2024 17:02:41.715333939 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:41.715352058 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 4, 2024 17:02:49.536350965 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 4, 2024 17:02:49.536431074 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 4, 2024 17:02:49.536626101 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 4, 2024 17:02:49.933871031 CEST	49723	80	192.168.2.4	88.221.110.91
Oct 4, 2024 17:02:49.939428091 CEST	80	49723	88.221.110.91	192.168.2.4
Oct 4, 2024 17:02:49.939513922 CEST	49723	80	192.168.2.4	88.221.110.91
Oct 4, 2024 17:02:51.027950048 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 4, 2024 17:02:51.027982950 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 4, 2024 17:03:28.778033972 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:28.778078079 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:28.779838085 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:28.779838085 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:28.779872894 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.465405941 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.465478897 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.470566034 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.470587015 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.470824003 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.506082058 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.547410011 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.614233017 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.614259005 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.614265919 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.614276886 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.614305019 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.614312887 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.614339113 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.614357948 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.614388943 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.696971893 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.697035074 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.697057009 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.697086096 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.697108984 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.697127104 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.705579996 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.705605984 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.705662966 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.705688000 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.705729008 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.784852982 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.784876108 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.784945011 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.784972906 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.785000086 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.785017014 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.786789894 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.786813974 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.786879063 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.786891937 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.786926985 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.789757967 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.789777994 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.789834976 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.789850950 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.789886951 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.791416883 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.791431904 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.791481972 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.791491032 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.791532993 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.873500109 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.873533010 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.873583078 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.873610973 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.873636961 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.873653889 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.873853922 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.873877048 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.873907089 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.873913050 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.873940945 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.873960972 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.874304056 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.874325991 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.874356985 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.874363899 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.874391079 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.874412060 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.874747038 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.874768019 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.874803066 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.874808073 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.874845982 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.875792027 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.875813007 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.875845909 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.875850916 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.875894070 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.876442909 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.876463890 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.876494884 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.876499891 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.876535892 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.876612902 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.876660109 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.876708984 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.876748085 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.876826048 CEST	49750	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.876842022 CEST	443	49750	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.940392971 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.940431118 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.940501928 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.940542936 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.940587044 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.940628052 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.941888094 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.941901922 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.942015886 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.942027092 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.944827080 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.944906950 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.944979906 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.945097923 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.945127010 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.945831060 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.945848942 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.945904016 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.947004080 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.947026014 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.947074890 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.947295904 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.947305918 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:29.947662115 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:29.947685003 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.581527948 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.582571983 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.582590103 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.584203005 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.584211111 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.586019039 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.589380026 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.589406013 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.590249062 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.590255022 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.590298891 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.590667963 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.590682983 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.595262051 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.595266104 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.607278109 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.607958078 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.607973099 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.610610008 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.610615015 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.633001089 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.633699894 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.633755922 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.634752989 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.634778976 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.683204889 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.683235884 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.683433056 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.683454037 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.683509111 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.683638096 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.683638096 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.683963060 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.683963060 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.683975935 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.683984041 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.687704086 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.687736988 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.687937021 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.688260078 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.688273907 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.688302040 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.688311100 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.688589096 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.688616991 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.688780069 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.688780069 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.688788891 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.688797951 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.688810110 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.688823938 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.688838005 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.691962004 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.692007065 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.692456007 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.692506075 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.692565918 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.692568064 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.692579985 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.692719936 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.692719936 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.692729950 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.693012953 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.693094969 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.694283009 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.694298029 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.694480896 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.696753979 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.696763039 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.696877003 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.700238943 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.700249910 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.722112894 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.722167969 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.722238064 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.722495079 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.722495079 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.722517014 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.722528934 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.725086927 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.725100994 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.725320101 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.725320101 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.725336075 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.753683090 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.753736019 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.754005909 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.754005909 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.755238056 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.755247116 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.756907940 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.756916046 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:30.757039070 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.758255959 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:30.758263111 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.487987041 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.488630056 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.488646030 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.489160061 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.489165068 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.493345976 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.494183064 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.494215012 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.494983912 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.494988918 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.498509884 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.499684095 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.499692917 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.500322104 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.500325918 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.523983955 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.525768042 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.525782108 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.526732922 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.527625084 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.527628899 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.530100107 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.530107021 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.531651974 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.531656027 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.588469982 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.588543892 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.588598967 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.592911959 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.592972994 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.593027115 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.600981951 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.601056099 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.601099014 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.615151882 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.615180969 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.615192890 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.615199089 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.618988991 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.619008064 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.621227026 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.621227026 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.621292114 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.621330976 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.629239082 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.629297018 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.629374981 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.631042957 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.631062031 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.631136894 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.632586002 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.632632017 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.632679939 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.633687973 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.633714914 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.633846045 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.633866072 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.634522915 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.634537935 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.637871027 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.637948036 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.637989998 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.638106108 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.638122082 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.638137102 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.638144970 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.638773918 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.638818979 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.638858080 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.639103889 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.639107943 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.646398067 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.646425962 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.646477938 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.649535894 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.649550915 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.653441906 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.653480053 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:31.653532982 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.654155016 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:31.654167891 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.287890911 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.289086103 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.289110899 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.290103912 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.290111065 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.295769930 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.296200037 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.296216965 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.296876907 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.296880960 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.301203012 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.301608086 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.301625013 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.302290916 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.302300930 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.304517984 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.305011034 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.305044889 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.305764914 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.305772066 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.343645096 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.344511986 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.344549894 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.345242977 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.345248938 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.387837887 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.387904882 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.388194084 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.388453960 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.388508081 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.388540030 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.388556004 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.392663002 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.392733097 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.396302938 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.396651983 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.396667957 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.398722887 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.398876905 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.399122000 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.399396896 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.399413109 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.401269913 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.401283979 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.403572083 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.403599024 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.404359102 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.404863119 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.404875994 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.414747953 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.414879084 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.414964914 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.415121078 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.415133953 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.422133923 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.422192097 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.422269106 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.422550917 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.422565937 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.432943106 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.433001041 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.433185101 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.433347940 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.433347940 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.433402061 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.433429003 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.436944008 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.437031031 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.437695026 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.438004971 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.438033104 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.450203896 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.450367928 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.450515985 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.450623035 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.450665951 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.450721979 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.450737953 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.454628944 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.454667091 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:32.454756021 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.455059052 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:32.455085993 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.064531088 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.066632032 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.066660881 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.068320036 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.068330050 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.079008102 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.080069065 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.080086946 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.081136942 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.081142902 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.082550049 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.083136082 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.083199024 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.084111929 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.084125996 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.084270000 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.084799051 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.084822893 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.085928917 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.085932970 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.111907959 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.112293005 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.112313986 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.112808943 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.112824917 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.173361063 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.173527956 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.174298048 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.184359074 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.184389114 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.185378075 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.185432911 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.185502052 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.186285973 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.186367035 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.186523914 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.191008091 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.191066027 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.191127062 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.212297916 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.212364912 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.212513924 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.214946985 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.214946985 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.214967012 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.214993954 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.216229916 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.216249943 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.216989994 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.216995001 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.217005014 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.217010021 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.218657017 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.218657017 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.218719959 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.218734026 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.221103907 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.221146107 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.221276999 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.222409010 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.222457886 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.222503901 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.222680092 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.222695112 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.224221945 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.224261999 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.224309921 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.224677086 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.224688053 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.224699974 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.224706888 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.225631952 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.225645065 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.225688934 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.225781918 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.225785017 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.226788044 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.226807117 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.226846933 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.226970911 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.226983070 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.872921944 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.886811018 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.888617039 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.888644934 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.889209986 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.889215946 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.889571905 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.889599085 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.890261889 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.890270948 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.912079096 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.912730932 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.912780046 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.913528919 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.913542032 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.919307947 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.919709921 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.919727087 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.920021057 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.920125008 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.920135021 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.920398951 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.920423985 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.920752048 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.920758009 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.991657972 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.991753101 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.991816044 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.992105007 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.992105007 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.992120028 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.992130995 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.997200966 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.997239113 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:33.997423887 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.998321056 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:33.998332977 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.000386000 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.000453949 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.000521898 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.002567053 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.002593994 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.002607107 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.002614021 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.005461931 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.005484104 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.005655050 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.005747080 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.005759954 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.019280910 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.019345045 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.019409895 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.019619942 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.019638062 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.019649029 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.019654989 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.022593021 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.022682905 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.022769928 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.022923946 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.022953033 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.027237892 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.027301073 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.027424097 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.027452946 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.027471066 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.027483940 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.027488947 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.028259039 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.028368950 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.028497934 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.028547049 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.028551102 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.028569937 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.028573990 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.030256987 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.030288935 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.030354977 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.030698061 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.030709982 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.031155109 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.031193018 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.031244993 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.031362057 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.031374931 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.780807018 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.781436920 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.781470060 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.781975031 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.781980038 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.858716965 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.859338999 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.859350920 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.859862089 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.859868050 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.866111994 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.866559982 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.866568089 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.866935015 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.866939068 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.878897905 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.879313946 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.879334927 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.879712105 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.879715919 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.881197929 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.881505966 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.881545067 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.881875038 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.881880999 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.914503098 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.914638042 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.914711952 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.914846897 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.914865017 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.914875031 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.914880991 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.918020010 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.918039083 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.918121099 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.918278933 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.918286085 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.959434986 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.959567070 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.959701061 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.959774971 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.959774971 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.959791899 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.959800005 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.962996960 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.963049889 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.963419914 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.963419914 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.963469028 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.966454983 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.966609955 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.966671944 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.966706038 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.966706038 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.966717958 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.966725111 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.969026089 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.969063044 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.969119072 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.969279051 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.969289064 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.981180906 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.981240988 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.981348991 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.981396914 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.981396914 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.981406927 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.981415987 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.983375072 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.983428001 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.983489990 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.983674049 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.983690977 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.986752033 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.986810923 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.986920118 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.986948967 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.986968040 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.986983061 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.986989021 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.988907099 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.988935947 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:34.988991022 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.989113092 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:34.989126921 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.495270014 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.495820045 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.495853901 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.496316910 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.496321917 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.554070950 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.554601908 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.554644108 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.555079937 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.555090904 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.596009970 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.596080065 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.596138000 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.596347094 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.596360922 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.596381903 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.596388102 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.599680901 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.599720955 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.599958897 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.600147963 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.600162029 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.630501986 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.631050110 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.631086111 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.631515026 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.631520987 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.643450975 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.643836021 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.643848896 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.644273996 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.644278049 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.659437895 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.659498930 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.659682989 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.659764051 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.659764051 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.659806013 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.659832001 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.661708117 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.662127972 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.662163973 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.662537098 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.662548065 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.662765026 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.662849903 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.662970066 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.663204908 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.663239956 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.732726097 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.732784033 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.732852936 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.733156919 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.733179092 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.733191967 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.733197927 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.736598969 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.736629963 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.736752033 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.736963987 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.736974955 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.753756046 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.753818989 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.753860950 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.754030943 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.754050016 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.754062891 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.754069090 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.757114887 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.757154942 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.757226944 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.757390022 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.757404089 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.765609026 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.765666962 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.765710115 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.765861034 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.765872002 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.765883923 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.765891075 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.768604994 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.768640041 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:35.768857002 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.769037962 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:35.769047976 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.261125088 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.261847973 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.261869907 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.262402058 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.262407064 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.343346119 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.344265938 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.344326973 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.344367981 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.344381094 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.359831095 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.359891891 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.360044956 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.360249043 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.360249043 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.360264063 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.360272884 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.363289118 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.363322973 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.363588095 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.363588095 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.363611937 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.390033960 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.390647888 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.390664101 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.391050100 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.391056061 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.407253027 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.407892942 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.407911062 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.412259102 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.412265062 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.434576988 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.435697079 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.435697079 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.435743093 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.435786963 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.447348118 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.447418928 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.447725058 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.447725058 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.447725058 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.450665951 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.450717926 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.450994968 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.450995922 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.451081991 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.490926027 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.491017103 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.491362095 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.491363049 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.491729975 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.491743088 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.494668007 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.494709015 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.495263100 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.495263100 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.495348930 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.507890940 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.507967949 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.508245945 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.508269072 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.508269072 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.508275032 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.508281946 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.511126995 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.511163950 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.511367083 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.511367083 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.511400938 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.535216093 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.535336018 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.535597086 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.535598040 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.535691023 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.535712957 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.539043903 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.539088964 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.539325953 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.539325953 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.539352894 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:36.764256954 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:36.764297962 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.013572931 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.014713049 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.014713049 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.014740944 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.014758110 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.114784956 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.114944935 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.115222931 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.115222931 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.115318060 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.115338087 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.118174076 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.118223906 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.118421078 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.118638039 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.118654013 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.131422043 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.132409096 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.132409096 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.132436991 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.132457972 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.142776012 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.144862890 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.144862890 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.144876957 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.144892931 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.174237967 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.174858093 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.174881935 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.175656080 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.175668001 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.191241980 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.191966057 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.191989899 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.192595005 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.192612886 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.238517046 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.238595009 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.239016056 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.242520094 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.242546082 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.242552996 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.242558956 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.243690014 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.243837118 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.243923903 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.245275021 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.245275021 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.245289087 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.245306015 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.252129078 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.252216101 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.252549887 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.253123999 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.253156900 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.254287958 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.254343033 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.254616976 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.254616976 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.254662037 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.281769991 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.281958103 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.282171965 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.282543898 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.282565117 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.282577038 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.282582045 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.289309978 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.289350033 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.289508104 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.289803028 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.289818048 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.291734934 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.291799068 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.291945934 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.292287111 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.292316914 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.297739029 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.297787905 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.298100948 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.298528910 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.298549891 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.907869101 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.908487082 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.908513069 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:37.909282923 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:37.909287930 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.018276930 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.019150019 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.019185066 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.020256042 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.020261049 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.020683050 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.020750999 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.021068096 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.021176100 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.021192074 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.021203041 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.021208048 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.028949976 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.028992891 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.029258013 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.029663086 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.029678106 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.035921097 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.036633015 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.036647081 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.037939072 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.037945032 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.081624031 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.082613945 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.082633018 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.083719015 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.083724976 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.092415094 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.092911005 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.092931986 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.093523026 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.093528986 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.120654106 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.120721102 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.121881962 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.127722025 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.127757072 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.127783060 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.127796888 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.134010077 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.134047031 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.134135008 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.134341955 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.134351969 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.144958019 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.145023108 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.145082951 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.145311117 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.145328999 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.149101019 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.149135113 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.149338007 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.149939060 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.149954081 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.191708088 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.191785097 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.191829920 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.191972017 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.191983938 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.192009926 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.192014933 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.194298029 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.194333076 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.194592953 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.194751024 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.194760084 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.198360920 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.198421001 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.198473930 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.198616982 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.198636055 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.198648930 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.198656082 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.200771093 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.200784922 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.200850010 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.200994015 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.201001883 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.572901964 CEST	49807	443	192.168.2.4	216.58.212.164
Oct 4, 2024 17:03:38.572954893 CEST	443	49807	216.58.212.164	192.168.2.4
Oct 4, 2024 17:03:38.573023081 CEST	49807	443	192.168.2.4	216.58.212.164
Oct 4, 2024 17:03:38.573585033 CEST	49807	443	192.168.2.4	216.58.212.164
Oct 4, 2024 17:03:38.573601961 CEST	443	49807	216.58.212.164	192.168.2.4
Oct 4, 2024 17:03:38.674592018 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.675618887 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.675642014 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.676493883 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.676501036 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.791528940 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.791685104 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.791754961 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.791825056 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.804088116 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.804127932 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.811160088 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.828512907 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.828547955 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.828562975 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.828571081 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.829291105 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.829315901 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.830518007 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.830544949 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.831350088 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.831355095 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.860869884 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.869519949 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.869543076 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.870949984 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.870955944 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.873956919 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.874005079 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.874099016 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.875365973 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.875380039 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.876976013 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.878988028 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.879005909 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.880034924 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.880039930 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.928733110 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.928800106 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.928878069 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.929434061 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.929455996 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.929518938 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.929524899 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.931504011 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.931616068 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.931668043 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.934289932 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.934302092 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.946069956 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.946106911 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.946266890 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.947272062 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.947280884 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.947381020 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.948409081 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.948419094 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.948744059 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.948750973 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.974211931 CEST	49724	80	192.168.2.4	88.221.110.91
Oct 4, 2024 17:03:38.976943970 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.977025032 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.977080107 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.977648973 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.977667093 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.977677107 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.977682114 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.980767012 CEST	80	49724	88.221.110.91	192.168.2.4
Oct 4, 2024 17:03:38.980814934 CEST	49724	80	192.168.2.4	88.221.110.91
Oct 4, 2024 17:03:38.983408928 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.983496904 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.983606100 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.984488010 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.984494925 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.984513044 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.984517097 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.987226963 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.987260103 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.987375021 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.992172956 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.992211103 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.992275953 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.992681026 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.992695093 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:38.993633986 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:38.993645906 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.228807926 CEST	443	49807	216.58.212.164	192.168.2.4
Oct 4, 2024 17:03:39.229549885 CEST	49807	443	192.168.2.4	216.58.212.164
Oct 4, 2024 17:03:39.229583025 CEST	443	49807	216.58.212.164	192.168.2.4
Oct 4, 2024 17:03:39.229929924 CEST	443	49807	216.58.212.164	192.168.2.4
Oct 4, 2024 17:03:39.230667114 CEST	49807	443	192.168.2.4	216.58.212.164
Oct 4, 2024 17:03:39.230734110 CEST	443	49807	216.58.212.164	192.168.2.4
Oct 4, 2024 17:03:39.273071051 CEST	49807	443	192.168.2.4	216.58.212.164
Oct 4, 2024 17:03:39.560120106 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.561753035 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.561780930 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.562633991 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.562644005 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.602583885 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.603423119 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.603439093 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.604475021 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.604480028 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.636034966 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.639997005 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.641227961 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.642376900 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.642452955 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.642920017 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.642932892 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.643265963 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.643326998 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.643625975 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.643634081 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.643802881 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.643819094 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.644092083 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.644095898 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.668947935 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.669008970 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.669218063 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.669245958 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.669262886 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.669274092 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.669280052 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.671827078 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.671864033 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.672034025 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.672266006 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.672276020 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.737654924 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.737708092 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.737806082 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.737926960 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.737943888 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.737953901 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.737958908 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.740464926 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.740505934 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.740597963 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.740771055 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.740783930 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.809480906 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.809561014 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.809684038 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.809932947 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.809964895 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.809978962 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.809983969 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.812283993 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.812340975 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.812388897 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.812541962 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.812565088 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.812607050 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.812613964 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.813215971 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.813241005 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.813337088 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.813652039 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.813664913 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.815058947 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.815098047 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.815149069 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.815282106 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.815291882 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.822185040 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.822240114 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.822387934 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.822387934 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.822387934 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.824348927 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.824383974 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:39.824460030 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.824584961 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:39.824596882 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.132383108 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.132414103 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.456769943 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.458353996 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.458353996 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.458378077 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.458400965 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.540899038 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.542151928 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.542170048 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.542532921 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.542543888 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.545701027 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.546248913 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.546295881 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.547024012 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.547032118 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.558744907 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.559108019 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.559138060 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.559673071 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.559679985 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.563461065 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.563604116 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.563721895 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.563971043 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.563971043 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.563994884 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.564004898 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.567977905 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.568008900 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.568563938 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.568939924 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.568958044 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.580950975 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.581654072 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.581681967 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.582709074 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.582715034 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.644625902 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.644685030 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.644851923 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.646389008 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.646389008 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.646403074 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.646414042 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.646711111 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.646842957 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.646902084 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.647624016 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.647646904 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.647793055 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.647800922 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.651746035 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.651787996 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.651930094 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.652194023 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.652205944 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.653364897 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.653394938 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.653484106 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.653748035 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.653759956 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.660972118 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.661051035 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.661360979 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.661464930 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.661484957 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.664542913 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.664587975 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.664666891 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.665174007 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.665191889 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.687732935 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.687803030 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.688268900 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.688288927 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.688302040 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.688308001 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.688314915 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.692645073 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.692670107 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:40.693201065 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.693201065 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:40.693232059 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.236036062 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.236624002 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.236649990 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.237137079 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.237143040 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.295907021 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.296521902 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.296549082 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.297041893 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.297048092 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.315943003 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.316447973 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.316477060 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.316582918 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.316953897 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.316960096 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.317126989 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.317156076 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.317584991 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.317589998 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.343310118 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.343374014 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.343422890 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.343671083 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.343694925 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.343708992 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.343714952 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.346868992 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.346904039 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.346982956 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.347174883 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.347187042 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.357274055 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.357631922 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.357650995 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.358086109 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.358092070 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.396152020 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.396222115 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.396312952 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.396559954 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.396573067 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.396581888 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.396586895 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.399848938 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.399864912 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.399933100 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.400110960 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.400121927 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.434247017 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.434325933 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.434381962 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.434681892 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.434705973 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.434720039 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.434726954 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.437349081 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.437417030 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.437464952 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.437763929 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.437794924 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.437808037 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.437817097 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.438744068 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.438770056 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.438848019 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.438982010 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.438997030 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.440352917 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.440361023 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.440421104 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.440619946 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.440629005 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.474842072 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.474924088 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.474983931 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.475187063 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.475213051 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.475224972 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.475230932 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.479206085 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.479252100 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:41.479336023 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.479530096 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:41.479543924 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.021770000 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.067562103 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.067591906 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.068582058 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.068587065 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.092343092 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.092890978 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.092900991 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.093360901 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.093364954 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.101814032 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.102477074 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.102505922 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.103326082 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.103341103 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.112245083 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.112700939 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.112713099 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.113554001 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.113559008 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.144503117 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.144936085 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.144963026 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.145675898 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.145682096 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.166214943 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.166275978 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.166321039 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.166655064 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.166671991 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.166682959 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.166687965 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.171494007 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.171542883 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.171597004 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.171982050 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.171998024 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.201096058 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.201164007 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.201267958 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.201524019 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.201530933 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.201543093 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.201546907 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.201723099 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.201783895 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.201877117 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.202733040 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.202752113 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.205916882 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.205965042 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.206051111 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.207101107 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.207110882 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.207211018 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.207664967 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.207684994 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.207815886 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.207824945 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.213110924 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.213176966 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.213238955 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.214196920 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.214205027 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.217971087 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.217988968 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.218117952 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.218482018 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.218499899 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.247539997 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.247673988 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.247778893 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.362227917 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.362253904 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.367713928 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.367763042 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.367872000 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.368135929 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.368150949 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.903285027 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.903863907 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.903893948 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:42.904433966 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:42.904438972 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.014677048 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.014971972 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.015353918 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.015373945 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.015566111 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.015599966 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.015965939 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.015971899 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.016057968 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.016062975 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.039134979 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.039817095 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.039838076 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.040551901 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.040556908 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.115379095 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.115403891 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.115461111 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.115484953 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.115745068 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.115758896 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.115780115 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.115904093 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.115933895 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.116080046 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.120112896 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.120162010 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.120249033 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.120393038 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.120407104 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.128492117 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.128523111 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.128621101 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.128633022 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.128813982 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.128823042 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.128901005 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.128958941 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.128990889 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.129086971 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.129385948 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.129527092 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.129652977 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.131143093 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.131160021 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.131263971 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.131500006 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.131509066 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.131922960 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.131942034 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.131953001 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.131959915 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.135307074 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.135344982 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.135401011 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.135540962 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.135551929 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.144440889 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.144494057 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.144707918 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.144746065 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.144750118 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.144761086 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.144764900 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.146948099 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.146984100 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.147063017 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.147300005 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.147310972 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.229988098 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.230993032 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.230993032 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.231010914 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.231024981 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.341639996 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.341667891 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.341727972 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.341770887 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.341837883 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.342081070 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.342118025 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.342154026 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.342170000 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.345289946 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.345328093 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.345541000 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.345724106 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.345733881 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.776935101 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.777770996 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.777797937 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.778131008 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.778136969 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.801939964 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.802360058 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.802381992 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.802768946 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.802774906 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.814599991 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.814969063 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.815009117 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.815366983 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.815371990 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.878436089 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.878509045 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.878837109 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.878837109 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.878875971 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.878892899 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.882098913 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.882136106 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.882541895 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.882601976 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.882616997 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.905344963 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.905406952 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.905786037 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.905786991 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.905872107 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.905889988 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.908845901 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.908885956 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.909240007 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.909326077 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.909338951 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.917768002 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.917875051 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.918147087 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.918147087 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.918292046 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.918298960 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.920952082 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.920984030 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:43.921241999 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.921241999 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:43.921267986 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.000559092 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.001626968 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.001626968 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.001641989 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.001657009 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.103252888 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.103946924 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.104227066 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.104227066 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.104276896 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.104295015 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.107251883 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.107312918 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.107419968 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.107934952 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.107954979 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.532324076 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.532888889 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.532903910 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.533395052 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.533400059 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.555461884 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.555968046 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.556030989 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.556503057 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.556516886 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.558747053 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.559094906 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.559108973 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.559472084 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.559478045 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.637238979 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.637494087 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.637605906 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.637748957 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.637768984 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.637783051 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.637788057 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.643132925 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.643176079 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.643309116 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.643539906 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.643554926 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.659109116 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.659168005 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.659239054 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.659431934 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.659487009 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.659523964 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.659540892 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.662087917 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.662127972 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.662182093 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.662190914 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.662435055 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.662448883 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.662460089 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.662511110 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.662550926 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.662563086 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.662571907 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.662576914 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.664454937 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.664491892 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.664644003 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.664786100 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.664800882 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.749317884 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.749804020 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.749830008 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.750282049 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.750288010 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.863704920 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.864185095 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.864233971 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.864286900 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.864309072 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.864319086 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.864326954 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.867379904 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.867427111 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:44.867511034 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.867718935 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:44.867731094 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.309925079 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.310555935 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.310583115 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.311161995 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.311167955 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.315136909 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.316025972 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.316026926 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.316051960 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.316068888 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.320153952 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.320574999 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.320602894 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.321021080 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.321026087 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.412064075 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.412134886 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.412249088 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.412283897 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.412319899 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.412484884 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.412503004 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.412569046 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.412575006 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.418296099 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.418348074 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.419001102 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.423430920 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.423454046 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.439830065 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.439899921 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.440232038 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.440232038 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.440510988 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.440525055 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.441235065 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.441646099 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.442009926 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.442009926 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.442051888 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.442074060 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.443893909 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.443919897 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.444060087 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.444062948 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.444102049 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.444124937 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.444142103 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:45.444194078 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.444318056 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:45.444335938 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.090253115 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.090948105 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.090970993 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.096277952 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.096282959 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.097467899 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.098474979 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.098474979 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.098490000 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.098494053 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.128619909 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.129641056 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.129657984 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.131189108 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.131192923 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.146657944 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.148411036 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.148411036 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.148430109 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.148446083 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.193882942 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.194041014 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.194099903 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.194118023 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.194154024 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.194200993 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.194298983 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.194314003 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.194323063 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.194329023 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.198519945 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.198723078 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.198776007 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.200189114 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.200258970 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.200330019 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.200418949 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.200424910 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.200432062 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.200434923 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.202589989 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.202625036 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.205349922 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.205359936 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.205424070 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.205609083 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.205620050 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.233449936 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.233510971 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.233577967 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.234147072 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.234169006 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.234180927 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.234186888 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.240130901 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.240189075 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.240293026 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.240766048 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.240778923 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.257760048 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.257834911 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.257910013 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.258373976 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.258394003 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.264244080 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.264296055 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.264364958 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.264558077 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.264571905 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.853935957 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.854645014 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.854681015 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.855278969 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.855283976 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.858196020 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.858546972 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.858561039 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.858958960 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.858963966 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.882605076 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.883037090 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.883058071 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.883539915 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.883544922 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.939182043 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.939773083 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.939790964 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.940288067 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.940293074 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.953402996 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.953540087 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.953591108 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.953608036 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.953658104 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.953754902 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.953790903 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.953815937 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.953825951 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.957395077 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.957437992 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.957501888 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.957705021 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.957715034 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.959579945 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.959647894 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.959691048 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.959952116 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.959961891 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.959983110 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.959989071 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.969363928 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.969378948 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:46.969435930 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.969947100 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:46.969960928 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.008377075 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.008640051 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.008697033 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.008938074 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.008953094 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.014802933 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.014834881 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.014885902 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.015539885 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.015552998 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.041670084 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.041879892 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.041925907 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.042114973 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.042126894 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.069853067 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.069894075 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.069956064 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.070698023 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.070709944 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.598756075 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.599529028 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.599564075 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.600502014 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.600514889 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.632152081 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.632668972 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.632709980 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.634290934 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.634296894 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.692308903 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.697767019 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.697767019 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.697789907 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.697799921 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.705910921 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.705971956 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.708426952 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.708426952 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.708549976 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.708590031 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.711007118 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.713485003 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.713509083 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.715960026 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.716041088 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.716075897 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.716082096 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.716263056 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.720282078 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.720313072 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.797218084 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.797580957 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.797624111 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.797772884 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.797928095 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.797928095 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.797947884 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.797955990 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.803558111 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.803615093 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.804049015 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.804372072 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.804800987 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.804991007 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.805006027 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.805186987 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.805473089 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.805473089 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.805489063 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.805495977 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.808568954 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.808608055 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.808885098 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.808885098 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.808922052 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.817806005 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.818192005 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.818238020 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.818383932 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.818383932 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.818797112 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.818806887 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.821646929 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.821669102 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:47.822205067 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.824467897 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:47.824481010 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.366823912 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.367367029 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.367397070 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.367842913 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.367849112 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.468879938 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.469167948 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.469223976 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.469592094 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.469611883 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.471257925 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.473913908 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.473925114 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.476866961 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.476872921 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.480968952 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.481013060 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.481074095 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.481457949 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.481471062 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.497653008 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.498832941 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.498843908 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.499701977 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.499706984 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.510433912 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.511464119 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.511486053 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.512581110 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.512592077 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.572026968 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.572097063 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.572146893 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.572160006 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.572218895 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.572268963 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.572813034 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.572829008 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.572837114 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.572844028 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.580790997 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.580831051 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.580889940 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.581168890 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.581182003 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.603032112 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.603247881 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.603301048 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.603530884 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.603542089 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.603554010 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.603559017 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.610338926 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.610371113 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.610423088 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.611341953 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.611352921 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.615003109 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.615303993 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.615348101 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.615479946 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.615498066 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.615505934 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.615513086 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.622100115 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.622143984 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:48.622201920 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.622616053 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:48.622638941 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.353189945 CEST	443	49807	216.58.212.164	192.168.2.4
Oct 4, 2024 17:03:49.353257895 CEST	443	49807	216.58.212.164	192.168.2.4
Oct 4, 2024 17:03:49.356323957 CEST	49807	443	192.168.2.4	216.58.212.164
Oct 4, 2024 17:03:49.356559992 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.362937927 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.362962008 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.364048958 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.364089966 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.364094973 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.364099979 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.365180969 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.365180969 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.365194082 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.365236044 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.366561890 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.366563082 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.366583109 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.366601944 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.368108988 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.369002104 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.369020939 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.369338036 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.369342089 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.466321945 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.466845036 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.466896057 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.466950893 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.466950893 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.467125893 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.467286110 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.467638969 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.468741894 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.468928099 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.471141100 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.472146988 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.472270012 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.475157976 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.504693031 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.504719973 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.504745007 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.504751921 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.508066893 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.508093119 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.508121014 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.508126974 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.510579109 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.510580063 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.510600090 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.510610104 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.512407064 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.512407064 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.512414932 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.512423992 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.516952038 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.517003059 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.517062902 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.517793894 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.517802000 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.518023014 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.518969059 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.519047976 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.519052982 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.519054890 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.519062042 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.519094944 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.519169092 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.519174099 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.519335032 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.519346952 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.519350052 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.519375086 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:49.519752026 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:49.519767046 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.158040047 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.178544044 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.187002897 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.198252916 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.198282957 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.198833942 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.198838949 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.198869944 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.198877096 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.199136019 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.199178934 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.199507952 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.199517012 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.199668884 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.199673891 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.213134050 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.213634968 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.213665962 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.214396954 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.214405060 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.302453995 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.302486897 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.302544117 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.302560091 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.302602053 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.302961111 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.303139925 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.303183079 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.303366899 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.303400040 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.303442001 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.303448915 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.303574085 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.303638935 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.303683996 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.305957079 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.305974960 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.305984020 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.305989981 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.306894064 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.306898117 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.312060118 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.312103987 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.312165976 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.313198090 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.313206911 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.313258886 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.313548088 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.313560963 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.314488888 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.314526081 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.314750910 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.314879894 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.314898968 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.314976931 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.314989090 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.325083017 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.340823889 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.340939999 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.341058969 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.341105938 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.341142893 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.341161013 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.345717907 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.345823050 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.345902920 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.346245050 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.346271038 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.979011059 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.979573965 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.979640007 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.980173111 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.980186939 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.991537094 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.991947889 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.991971016 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:50.992393017 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:50.992398977 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.001400948 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.001832962 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.001844883 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.002229929 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.002233982 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.015634060 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.016043901 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.016078949 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.016429901 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.016436100 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.039141893 CEST	49807	443	192.168.2.4	216.58.212.164
Oct 4, 2024 17:03:51.039186001 CEST	443	49807	216.58.212.164	192.168.2.4
Oct 4, 2024 17:03:51.082217932 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.082304955 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.082376957 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.084356070 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.084395885 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.084424019 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.084439993 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.087671995 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.087722063 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.087788105 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.087963104 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.087977886 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.105778933 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.105950117 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.106038094 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.106169939 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.106192112 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.106214046 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.106225014 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.109061003 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.109081984 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.109347105 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.109532118 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.109540939 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.113893986 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.114075899 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.114139080 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.114180088 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.114181042 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.114206076 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.114218950 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.116370916 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.116411924 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.116467953 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.116589069 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.116602898 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.119374037 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.119546890 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.119601965 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.119612932 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.119688034 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.119738102 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.119766951 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.119777918 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.119793892 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.119797945 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.121928930 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.121969938 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.122878075 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.123131037 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.123147011 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.753341913 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.754029989 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.754048109 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.754672050 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.754676104 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.761339903 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.761845112 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.761873960 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.762279034 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.762286901 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.762509108 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.763005018 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.763020992 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.763273001 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.763278961 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.764955044 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.765258074 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.765266895 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.765691996 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.765697002 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.856478930 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.856736898 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.856842041 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.856930971 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.856951952 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.856962919 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.856967926 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.859859943 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.859900951 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.859973907 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.860105991 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.860120058 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.861212969 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.861341000 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.861421108 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.861531019 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.861531019 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.861579895 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.861608982 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.861996889 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.862142086 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.862191916 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.862210989 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.862224102 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.862279892 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.862484932 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.862499952 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.862541914 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.862548113 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.863727093 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.863739967 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.863886118 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.864295959 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.864305973 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.864794016 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.864816904 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.864873886 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.865031004 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.865041971 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.868634939 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.868664980 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.868709087 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.868714094 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.868747950 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.868863106 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.868869066 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.868897915 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.868902922 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.870811939 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.870853901 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:51.871006012 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.871159077 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:51.871181011 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.567394972 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.568108082 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.568137884 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.569282055 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.569339991 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.569353104 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.570048094 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.570089102 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.570672989 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.570689917 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.571592093 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.572204113 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.572222948 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.572722912 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.572729111 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.573486090 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.574450970 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.574472904 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.578202963 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.578217030 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.682200909 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.682898998 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.683089972 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.683089972 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.683423996 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.683443069 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.684809923 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.684907913 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.685035944 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.685185909 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.685251951 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.685251951 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.685283899 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.685311079 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.685420990 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.685614109 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.686182022 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.686315060 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.686315060 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.686332941 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.686337948 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.686623096 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.686665058 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.687218904 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.687458992 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.687477112 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.688271046 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.688281059 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.688373089 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.688422918 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.688453913 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.688534021 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.688617945 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.688632965 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.688632965 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.688649893 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.691126108 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.691215038 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.691313982 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.691391945 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.691411018 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.691411018 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.691461086 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.691468954 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.693260908 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.693288088 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:52.693392038 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.693494081 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:52.693502903 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.343431950 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.343997955 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.344017982 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.344479084 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.344482899 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.346906900 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.347275019 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.347311974 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.347589016 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.347604990 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.360671997 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.361059904 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.361072063 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.361483097 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.361486912 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.365673065 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.366065025 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.366097927 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.366390944 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.366398096 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.450274944 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.450500965 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.450551987 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.450685978 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.450706005 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.450717926 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.450722933 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.452445984 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.452610970 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.452668905 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.452802896 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.452816010 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.453865051 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.453912973 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.454003096 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.454157114 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.454173088 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.455188036 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.455199003 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.455403090 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.455570936 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.455583096 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.488861084 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.488928080 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.489089966 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.489140987 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.489146948 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.489171028 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.489176035 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.491709948 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.491760015 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.491935015 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.492127895 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.492140055 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.493240118 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.493278980 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.493339062 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.493396044 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.493516922 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.493529081 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.493541002 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.493546963 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.496287107 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.496304989 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:53.496499062 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.496499062 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:53.496520042 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.098931074 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.099594116 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.099612951 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.100117922 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.100125074 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.125037909 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.125628948 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.125642061 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.126094103 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.126100063 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.129244089 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.129637957 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.129682064 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.130011082 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.130017996 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.172148943 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.172698021 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.172739029 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.173305035 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.173311949 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.210146904 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.210284948 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.210534096 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.210611105 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.210629940 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.210645914 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.210653067 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.213625908 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.213656902 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.213747978 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.213927031 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.213943005 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.238965034 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.239162922 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.239217043 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.239274979 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.239300966 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.239315987 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.239325047 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.239907980 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.240019083 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.240093946 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.240283012 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.240396023 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.240411997 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.240425110 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.240431070 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.242295027 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.242315054 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.242417097 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.242686033 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.242717028 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.242748022 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.242765903 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.242820024 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.242974997 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.242989063 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.284785986 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.284939051 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.285058975 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.285160065 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.285173893 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.285186052 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.285195112 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.288458109 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.288547993 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.288634062 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.288824081 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.288856983 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.852193117 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.852951050 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.852982044 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.853616953 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.853622913 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.883749008 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.884305000 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.884327888 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.884941101 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.884947062 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.920595884 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.921226025 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.921256065 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.922010899 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.922014952 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.953730106 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.954346895 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.954382896 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.955108881 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.955116034 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.987351894 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.987523079 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.987780094 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.987780094 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.987831116 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.987852097 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.991074085 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.991113901 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:54.991204023 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.991664886 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:54.991678953 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.008599997 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.008625984 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.008670092 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.008683920 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.008728027 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.008969069 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.008979082 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.008991003 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.008996964 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.012568951 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.012590885 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.012661934 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.012861013 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.012875080 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.039060116 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.039611101 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.039799929 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.040065050 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.040077925 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.040260077 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.040266037 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.044383049 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.044434071 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.044490099 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.044667959 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.044682980 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.060054064 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.060081005 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.060127974 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.060159922 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.060271978 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.060971975 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.060985088 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.060997009 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.061003923 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.070550919 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.070584059 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.070671082 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.070848942 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.070863962 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.631727934 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.632297993 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.632313967 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.632900000 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.632906914 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.633460045 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.633786917 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.633805990 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.634313107 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.634316921 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.659656048 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.660242081 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.660264969 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.660737991 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.660743952 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.720843077 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.721379042 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.721399069 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.721946001 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.721952915 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.733768940 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.733896017 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.734097958 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.734142065 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.734160900 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.734170914 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.734177113 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.736529112 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.736587048 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.736654997 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.736780882 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.736804008 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.736820936 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.736831903 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.738073111 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.738112926 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.738370895 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.738707066 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.738723040 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.739403009 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.739423037 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.739703894 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.739703894 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.739732981 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.762852907 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.762921095 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.763099909 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.763150930 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.763161898 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.766110897 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.766135931 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.766212940 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.766334057 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.766347885 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.819896936 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.820051908 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.820112944 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.820322037 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.820332050 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.820344925 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.820348978 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.823483944 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.823513985 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:55.823775053 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.823937893 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:55.823951960 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.394007921 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.394862890 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.394890070 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.395411015 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.395416975 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.411976099 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.412615061 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.412631035 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.413506031 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.413521051 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.440373898 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.441114902 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.441135883 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.441785097 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.441791058 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.468163013 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.468698025 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.468725920 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.469424009 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.469436884 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.498742104 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.498969078 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.499075890 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.499377966 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.499377966 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.499397039 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.499407053 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.502757072 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.502793074 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.502867937 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.503405094 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.503413916 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.519942999 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.520102978 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.520241022 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.520241022 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.520241022 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.523422956 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.523448944 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.523601055 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.523941040 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.523952961 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.546245098 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.546418905 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.546495914 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.546668053 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.546689034 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.546700001 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.546705961 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.549806118 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.549865007 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.549942017 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.550298929 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.550312042 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.567558050 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.567635059 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.567677021 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.567697048 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.567719936 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.568052053 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.568061113 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.571572065 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.571594000 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.571687937 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.572025061 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.572035074 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:56.834289074 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:56.834316015 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.167834044 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.168414116 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.168430090 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.169190884 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.169194937 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.173135042 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.173507929 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.173516989 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.174123049 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.174129009 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.189418077 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.189977884 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.189997911 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.190465927 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.190471888 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.235209942 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.236221075 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.236221075 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.236242056 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.236255884 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.277340889 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.277704000 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.277823925 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.277823925 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.277977943 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.277997017 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.279016018 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.279465914 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.279599905 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.279668093 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.279668093 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.279686928 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.279694080 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.281418085 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.281490088 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.281533957 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.281553984 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.281588078 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.281706095 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.281717062 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.281743050 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.281819105 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.281830072 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.294204950 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.294276953 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.294428110 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.294610977 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.294611931 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.294629097 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.294636965 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.297540903 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.297569990 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 4, 2024 17:03:57.297738075 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.297894955 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 4, 2024 17:03:57.297908068 CEST	443	49907	13.107.246.60	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 4, 2024 17:02:34.513181925 CEST	53	56123	1.1.1.1	192.168.2.4
Oct 4, 2024 17:02:34.515139103 CEST	53	52068	1.1.1.1	192.168.2.4
Oct 4, 2024 17:02:35.546006918 CEST	53	63008	1.1.1.1	192.168.2.4
Oct 4, 2024 17:02:36.035343885 CEST	65354	53	192.168.2.4	1.1.1.1
Oct 4, 2024 17:02:36.035485029 CEST	52618	53	192.168.2.4	1.1.1.1
Oct 4, 2024 17:02:36.046586990 CEST	53	65354	1.1.1.1	192.168.2.4
Oct 4, 2024 17:02:36.047044992 CEST	53	52618	1.1.1.1	192.168.2.4
Oct 4, 2024 17:02:36.986125946 CEST	63364	53	192.168.2.4	1.1.1.1
Oct 4, 2024 17:02:36.986323118 CEST	55621	53	192.168.2.4	1.1.1.1
Oct 4, 2024 17:02:36.997822046 CEST	53	63364	1.1.1.1	192.168.2.4
Oct 4, 2024 17:02:36.998008966 CEST	53	55621	1.1.1.1	192.168.2.4
Oct 4, 2024 17:02:38.394342899 CEST	62805	53	192.168.2.4	1.1.1.1
Oct 4, 2024 17:02:38.395138979 CEST	57061	53	192.168.2.4	1.1.1.1
Oct 4, 2024 17:02:38.452820063 CEST	53	62805	1.1.1.1	192.168.2.4
Oct 4, 2024 17:02:38.452874899 CEST	53	57061	1.1.1.1	192.168.2.4
Oct 4, 2024 17:02:50.532927990 CEST	138	138	192.168.2.4	192.168.2.255
Oct 4, 2024 17:02:52.720885992 CEST	53	53030	1.1.1.1	192.168.2.4
Oct 4, 2024 17:03:11.737107038 CEST	53	50529	1.1.1.1	192.168.2.4
Oct 4, 2024 17:03:33.935738087 CEST	53	51159	1.1.1.1	192.168.2.4
Oct 4, 2024 17:03:34.861790895 CEST	53	63415	1.1.1.1	192.168.2.4
Oct 4, 2024 17:03:38.562628031 CEST	65294	53	192.168.2.4	1.1.1.1
Oct 4, 2024 17:03:38.562863111 CEST	50835	53	192.168.2.4	1.1.1.1
Oct 4, 2024 17:03:38.569709063 CEST	53	65294	1.1.1.1	192.168.2.4
Oct 4, 2024 17:03:38.570164919 CEST	53	50835	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 17:02:36.035343885 CEST	192.168.2.4	1.1.1.1	0x57bf	Standard query (0)	cqn-k04.na1.hs-sales-engage.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:36.035485029 CEST	192.168.2.4	1.1.1.1	0xf334	Standard query (0)	cqn-k04.na1.hs-sales-engage.com	65	IN (0x0001)	false
Oct 4, 2024 17:02:36.986125946 CEST	192.168.2.4	1.1.1.1	0xd33a	Standard query (0)	cqn-k04.na1.hs-sales-engage.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:36.986323118 CEST	192.168.2.4	1.1.1.1	0xbfe1	Standard query (0)	cqn-k04.na1.hs-sales-engage.com	65	IN (0x0001)	false
Oct 4, 2024 17:02:38.394342899 CEST	192.168.2.4	1.1.1.1	0xe772	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:38.395138979 CEST	192.168.2.4	1.1.1.1	0x12cc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:03:38.562628031 CEST	192.168.2.4	1.1.1.1	0x7bc3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:03:38.562863111 CEST	192.168.2.4	1.1.1.1	0x8572	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 4, 2024 17:02:36.046586990 CEST	1.1.1.1	192.168.2.4	0x57bf	No error (0)	cqn-k04.na1.hs-sales-engage.com		104.18.38.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:36.046586990 CEST	1.1.1.1	192.168.2.4	0x57bf	No error (0)	cqn-k04.na1.hs-sales-engage.com		172.64.149.165	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:36.047044992 CEST	1.1.1.1	192.168.2.4	0xf334	No error (0)	cqn-k04.na1.hs-sales-engage.com			65	IN (0x0001)	false
Oct 4, 2024 17:02:36.997822046 CEST	1.1.1.1	192.168.2.4	0xd33a	No error (0)	cqn-k04.na1.hs-sales-engage.com		104.18.38.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:36.997822046 CEST	1.1.1.1	192.168.2.4	0xd33a	No error (0)	cqn-k04.na1.hs-sales-engage.com		172.64.149.165	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:36.998008966 CEST	1.1.1.1	192.168.2.4	0xbfe1	No error (0)	cqn-k04.na1.hs-sales-engage.com			65	IN (0x0001)	false
Oct 4, 2024 17:02:38.452820063 CEST	1.1.1.1	192.168.2.4	0xe772	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:38.452874899 CEST	1.1.1.1	192.168.2.4	0x12cc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 17:02:45.953413010 CEST	1.1.1.1	192.168.2.4	0xba4	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:45.953413010 CEST	1.1.1.1	192.168.2.4	0xba4	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:47.641882896 CEST	1.1.1.1	192.168.2.4	0x427b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 17:02:47.641882896 CEST	1.1.1.1	192.168.2.4	0x427b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:02:59.723634958 CEST	1.1.1.1	192.168.2.4	0xaf92	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 17:02:59.723634958 CEST	1.1.1.1	192.168.2.4	0xaf92	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:03:26.879344940 CEST	1.1.1.1	192.168.2.4	0x59d3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 17:03:26.879344940 CEST	1.1.1.1	192.168.2.4	0x59d3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:03:28.774538040 CEST	1.1.1.1	192.168.2.4	0x1101	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 17:03:28.774538040 CEST	1.1.1.1	192.168.2.4	0x1101	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:03:38.569709063 CEST	1.1.1.1	192.168.2.4	0x7bc3	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:03:38.570164919 CEST	1.1.1.1	192.168.2.4	0x8572	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 17:03:47.190254927 CEST	1.1.1.1	192.168.2.4	0xd62c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 17:03:47.190254927 CEST	1.1.1.1	192.168.2.4	0xd62c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cqn-k04.na1.hs-sales-engage.com

https:

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	104.18.38.91	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:02:36 UTC	791	OUT	GET /Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1 HTTP/1.1 Host: cqn-k04.na1.hs-sales-engage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:02:36 UTC	759	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:02:36 GMT Content-Type: image/png Content-Length: 98 Connection: close x-robots-tag: none Cache-Control: no-cache, no-store, no-transform vary: origin access-control-allow-credentials: false x-content-type-options: nosniff x-envoy-upstream-service-time: 31 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: f152cc49-f98a-4a5c-a3e5-d30607d9e1ab x-evy-trace-served-by-pod: iad02/event-tracking-td/envoy-proxy-7559959cd-6vrfc x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: f152cc49-f98a-4a5c-a3e5-d30607d9e1ab CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cd60dceebdf7d0b-EWR
2024-10-04 15:02:36 UTC	98	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 06 50 4c 54 45 00 00 00 00 00 00 a5 67 b9 cf 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 78 5e 63 60 00 00 00 02 00 01 de 9e 8f bf 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEgtRNS@fIDATx^c`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	104.18.38.91	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:02:36 UTC	735	OUT	GET /favicon.ico HTTP/1.1 Host: cqn-k04.na1.hs-sales-engage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:02:36 UTC	748	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:02:36 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close last-modified: Tue, 20 Aug 2024 10:45:05 GMT etag: "66c473b1-47e" access-control-allow-credentials: false vary: origin x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 072642c6-a719-467e-b01c-d3c55a49a8fe x-evy-trace-served-by-pod: iad02/event-tracking-td/envoy-proxy-56c5b945dc-ljdmq x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 072642c6-a719-467e-b01c-d3c55a49a8fe CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cd60dd06f791a03-EWR
2024-10-04 15:02:36 UTC	621	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 a4 ca f3 59 00 6e e1 fd 28 84 e5 d5 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ac cf f4 50 24 82 e5 db 0e 75 e2 f0 f8 fa fd 03 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 d2 e5 f8 2a 12 78 e3 ea 86 b9 f0 78 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( Yn(P$u*xx
2024-10-04 15:02:36 UTC	529	IN	Data Raw: 2b 46 95 e8 b8 00 6e e1 ff 8e be f1 6f ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 f0 f6 fc 0c 1a 7c e3 e3 00 6e e1 ff 00 6e e1 fd 00 6e e1 fd 00 6e e1 ff 50 9b e9 ad fa fb fd 03 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 dc ea fa 22 32 8a e6 ca 2a 85 e5 d3 9a c5 f2 64 22 81 e4 db 2e 88 e6 cf ac cf f4 50 fa fb fd 01 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 fc fc fd 00 a0 c8 f3 5e 0c 74 e2 f2 5c a2 eb a1 f4 f8 fc 0a ff ff ff 00 4c 99 e9 b1 60 a4 eb 9c ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ca e0 f8 32 c2 db f7 3a 58 9f eb a6 08 72 e1 f7 9c c6 f2 61 ff ff ff 00 ff ff ff 00 ea f2 fb 12 24 82 e5 da 2c 86 Data Ascii: +Fno\|nnnnP"2*d".P^t\L`2:Xra$,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	104.18.38.91	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:02:37 UTC	366	OUT	GET /favicon.ico HTTP/1.1 Host: cqn-k04.na1.hs-sales-engage.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:02:38 UTC	756	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:02:37 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close last-modified: Tue, 20 Aug 2024 10:45:05 GMT etag: "66c473b1-47e" access-control-allow-credentials: false vary: origin x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 072642c6-a719-467e-b01c-d3c55a49a8fe x-evy-trace-served-by-pod: iad02/event-tracking-td/envoy-proxy-56c5b945dc-ljdmq x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 072642c6-a719-467e-b01c-d3c55a49a8fe CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cd60dd5482143dd-EWR
2024-10-04 15:02:38 UTC	613	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 a4 ca f3 59 00 6e e1 fd 28 84 e5 d5 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ac cf f4 50 24 82 e5 db 0e 75 e2 f0 f8 fa fd 03 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 d2 e5 f8 2a 12 78 e3 ea 86 b9 f0 78 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( Yn(P$u*xx
2024-10-04 15:02:38 UTC	537	IN	Data Raw: af d2 e5 f8 2a d0 e3 f8 2b 46 95 e8 b8 00 6e e1 ff 8e be f1 6f ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 f0 f6 fc 0c 1a 7c e3 e3 00 6e e1 ff 00 6e e1 fd 00 6e e1 fd 00 6e e1 ff 50 9b e9 ad fa fb fd 03 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 dc ea fa 22 32 8a e6 ca 2a 85 e5 d3 9a c5 f2 64 22 81 e4 db 2e 88 e6 cf ac cf f4 50 fa fb fd 01 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 fc fc fd 00 a0 c8 f3 5e 0c 74 e2 f2 5c a2 eb a1 f4 f8 fc 0a ff ff ff 00 4c 99 e9 b1 60 a4 eb 9c ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ca e0 f8 32 c2 db f7 3a 58 9f eb a6 08 72 e1 f7 9c c6 f2 61 ff ff ff 00 ff ff ff 00 ea f2 Data Ascii: +Fno\|nnnnP"2d".P^t\L`2:Xra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:02:40 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 15:02:40 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=178953 Date: Fri, 04 Oct 2024 15:02:40 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:02:41 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 15:02:41 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=179027 Date: Fri, 04 Oct 2024 15:02:41 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 15:02:41 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:29 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:29 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:29 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 30 Sep 2024 13:16:38 GMT ETag: "0x8DCE1521DF74B57" x-ms-request-id: 90766f9b-701e-006f-578c-15afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150329Z-15767c5fc55w69c2zvnrz0gmgw0000000ctg00000000uy59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:29 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-04 15:03:29 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-04 15:03:29 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-04 15:03:29 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-04 15:03:29 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-04 15:03:29 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-04 15:03:29 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-04 15:03:29 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-04 15:03:29 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-04 15:03:29 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:30 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:30 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1cc2ff82-e01e-0071-478c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150330Z-15767c5fc55rg5b7sh1vuv8t7n0000000cz000000000nqf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:30 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:30 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:30 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150330Z-15767c5fc55gs96cphvgp5f5vc0000000cq000000000339k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:30 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:30 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:30 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:30 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 39d43082-801e-00ac-658c-15fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150330Z-15767c5fc554l9xf959gp9cb1s00000006v000000000eve8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:30 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:30 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:30 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b9d87bc4-001e-008d-138c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150330Z-15767c5fc554wklc0x4mc5pq0w0000000cxg00000000t9tw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:30 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:30 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:30 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4b0a31e7-c01e-00ad-448c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150330Z-15767c5fc55v7j95gq2uzq37a00000000cxg00000000cgse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:30 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:31 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:31 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: aa8826a4-b01e-0053-608c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150331Z-15767c5fc552g4w83buhsr3htc0000000cn000000000qvtz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:31 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:31 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:31 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 757ce4f4-401e-000a-128c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150331Z-15767c5fc55lghvzbxktxfqntw0000000cc000000000fff8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:31 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:31 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:31 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 24b39cfc-301e-0096-2a8c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150331Z-15767c5fc5546rn6ch9zv310e000000005pg00000000bvwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:31 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:31 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:31 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3a0dc1eb-601e-0032-608c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150331Z-15767c5fc55w69c2zvnrz0gmgw0000000ctg00000000uyaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:31 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:31 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:31 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b2393cc3-501e-005b-768c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150331Z-15767c5fc55gs96cphvgp5f5vc0000000cn000000000agnk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:31 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:32 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:32 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 023e3708-a01e-003d-568c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150332Z-15767c5fc55fdfx81a30vtr1fw0000000d30000000004a8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:32 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:32 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: e0871f45-901e-00a0-0d8c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150332Z-15767c5fc55lghvzbxktxfqntw0000000cbg00000000gy0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:32 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:32 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 1cc301c6-e01e-0071-6b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150332Z-15767c5fc55lghvzbxktxfqntw0000000ccg00000000dsb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:32 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:32 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 023e3944-a01e-003d-708c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150332Z-15767c5fc55rv8zjq9dg0musxg0000000cn000000000n8db x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:32 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:32 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1cc301ca-e01e-0071-6f8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150332Z-15767c5fc55gs96cphvgp5f5vc0000000chg00000000nmem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:33 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 24b39fc0-301e-0096-298c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150333Z-15767c5fc55v7j95gq2uzq37a00000000cu000000000rz38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:33 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: c54fb296-901e-008f-528c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150333Z-15767c5fc55rv8zjq9dg0musxg0000000ckg00000000snmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:33 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:33 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: a68dfe67-f01e-0052-588c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150333Z-15767c5fc55n4msds84xh4z67w000000069g00000000smzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:33 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:33 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:33 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: dc68ccfc-201e-006e-438c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150333Z-15767c5fc55rg5b7sh1vuv8t7n0000000d30000000004mbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:33 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:33 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 79ade187-001e-0065-788c-150b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150333Z-15767c5fc55lghvzbxktxfqntw0000000cbg00000000gy2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:33 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0da94923-701e-0097-168c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150333Z-15767c5fc55qdcd62bsn50hd6s0000000cdg00000000nxa3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:33 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f10c824-e01e-0085-1c8c-15c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150333Z-15767c5fc55gq5fmm10nm5qqr80000000cw00000000055w7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:33 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:33 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8e9c869d-201e-000c-4b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150333Z-15767c5fc55whfstvfw43u8fp40000000cxg00000000009k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:33 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:33 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 82f8b22c-c01e-0014-5a8c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150333Z-15767c5fc554l9xf959gp9cb1s00000006tg00000000nm1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:34 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:33 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 09e6f7ee-001e-0034-548c-15dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150333Z-15767c5fc55n4msds84xh4z67w00000006d000000000anr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:34 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:34 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 831ef799-b01e-0098-7b8c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150334Z-15767c5fc55fdfx81a30vtr1fw0000000cy000000000srek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:34 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:34 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:34 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 30fd46b0-d01e-00a1-368c-1535b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150334Z-15767c5fc55gq5fmm10nm5qqr80000000cs000000000kf80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:34 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:34 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a901ce3-301e-005d-708c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150334Z-15767c5fc55rg5b7sh1vuv8t7n0000000cy000000000qqcu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:34 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c2ca9d4d-801e-0035-458c-15752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150334Z-15767c5fc55n4msds84xh4z67w00000006c000000000f2kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:34 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 75493038-e01e-00aa-508c-15ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150334Z-15767c5fc55rg5b7sh1vuv8t7n0000000d30000000004meb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:35 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:35 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a7623418-001e-00a2-348c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150335Z-15767c5fc5546rn6ch9zv310e000000005k000000000suyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:35 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:35 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:35 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: bb2e28bd-501e-0016-0b8c-15181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150335Z-15767c5fc55jdxmppy6cmd24bn00000004zg000000005tc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:35 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:35 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4b0a3852-c01e-00ad-3b8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150335Z-15767c5fc55kg97hfq5uqyxxaw0000000ckg00000000smtm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:35 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: eccf174e-001e-0079-238c-1512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150335Z-15767c5fc55v7j95gq2uzq37a00000000d0g000000001bnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:35 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:35 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 76615707-c01e-0082-6a8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150335Z-15767c5fc55fdfx81a30vtr1fw0000000d40000000000s9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:36 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:36 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4da5bf60-a01e-0070-668c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150336Z-15767c5fc55852fxfeh7csa2dn0000000cm000000000ewk2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:36 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:36 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:36 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 0dcb6c6d-e01e-0003-668c-150fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150336Z-15767c5fc55qkvj6n60pxm9mbw00000001xg000000004bvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:36 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:36 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 8789ddbb-a01e-0084-6a8c-159ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150336Z-15767c5fc55gq5fmm10nm5qqr80000000cv0000000008k8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:36 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:36 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150336Z-15767c5fc55472x4k7dmphmadg0000000cd00000000093zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:36 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:36 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:36 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 772ea1ab-e01e-003c-188c-15c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150336Z-15767c5fc5546rn6ch9zv310e000000005r000000000629q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:36 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:37 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:37 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3a0dcc46-601e-0032-6c8c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150337Z-15767c5fc55xsgnlxyxy40f4m00000000cn0000000009q2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:37 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:37 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:37 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 15fe0b87-a01e-0002-3b8c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150337Z-15767c5fc55d6fcl6x6bw8cpdc0000000cq0000000001p83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:37 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:37 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:37 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 1f480944-c01e-002b-018c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150337Z-15767c5fc55v7j95gq2uzq37a00000000cw000000000ke1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:37 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:37 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:37 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c54fbac1-901e-008f-588c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150337Z-15767c5fc55qkvj6n60pxm9mbw00000001r000000000v3bc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:37 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:37 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:37 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 75858473-001e-000b-318c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150337Z-15767c5fc55qdcd62bsn50hd6s0000000cgg00000000928g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:37 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:37 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 76252b1b-c01e-0066-488c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150337Z-15767c5fc55v7j95gq2uzq37a00000000cz0000000006fv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:38 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9a197f6-401e-0078-3b8c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150338Z-15767c5fc55lghvzbxktxfqntw0000000ccg00000000dsnr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:38 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:38 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b83a8dc4-f01e-003f-308c-15d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150338Z-15767c5fc55w69c2zvnrz0gmgw0000000cvg00000000nvfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:38 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:38 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2f8443ca-b01e-0070-308c-151cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150338Z-15767c5fc554l9xf959gp9cb1s00000006t000000000ptc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:38 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7be6812e-d01e-008e-528c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150338Z-15767c5fc554wklc0x4mc5pq0w0000000cyg00000000pkbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:38 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 1f480aea-c01e-002b-028c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150338Z-15767c5fc5546rn6ch9zv310e000000005p000000000e1fb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:38 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7be6821c-d01e-008e-398c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150338Z-15767c5fc55lghvzbxktxfqntw0000000cf0000000003mdx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:38 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 16d3a614-701e-0032-288c-15a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150338Z-15767c5fc5546rn6ch9zv310e000000005k000000000sv76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:38 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: aa883537-b01e-0053-4c8c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150338Z-15767c5fc55kg97hfq5uqyxxaw0000000cng00000000kvhf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:38 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: cce0beff-001e-0082-398c-155880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150338Z-15767c5fc55472x4k7dmphmadg0000000cf00000000019ps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:39 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:39 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: dc68dac5-201e-006e-298c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150339Z-15767c5fc55xsgnlxyxy40f4m00000000cq00000000022s5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:39 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:39 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:39 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: be018b72-401e-0035-7e8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150339Z-15767c5fc55ncqdn59ub6rndq00000000c9g00000000nn53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:39 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:39 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:39 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 801e2bd2-b01e-0021-6a8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150339Z-15767c5fc55w69c2zvnrz0gmgw0000000cxg00000000cu0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:39 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:39 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150339Z-15767c5fc55sdcjq8ksxt4n9mc000000020g00000000d0w1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:39 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:39 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4da5c699-a01e-0070-198c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150339Z-15767c5fc55qdcd62bsn50hd6s0000000chg0000000053q8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:39 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:40 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:40 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 285c7e33-c01e-008e-718c-157381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150340Z-15767c5fc55xsgnlxyxy40f4m00000000cq00000000022u0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:40 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:40 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:40 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1cc309a5-e01e-0071-358c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150340Z-15767c5fc55qdcd62bsn50hd6s0000000ccg00000000r0vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:40 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:40 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:40 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 04c46130-501e-0064-028c-151f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150340Z-15767c5fc55kg97hfq5uqyxxaw0000000crg000000008pad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:40 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:40 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:40 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 15fe14b4-a01e-0002-638c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150340Z-15767c5fc55qdcd62bsn50hd6s0000000cc000000000t1ma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:40 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:40 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:40 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6a902a44-301e-005d-788c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150340Z-15767c5fc55gq5fmm10nm5qqr80000000cqg00000000rt16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:40 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:41 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 4da5c882-a01e-0070-628c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150341Z-15767c5fc55qdcd62bsn50hd6s0000000cdg00000000nxqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:41 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:41 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: b9a19b13-401e-0078-148c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150341Z-15767c5fc55sdcjq8ksxt4n9mc00000001yg00000000pwq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:41 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:41 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:41 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 39955319-f01e-003f-703d-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150341Z-15767c5fc55gs96cphvgp5f5vc0000000cf000000000wq3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:41 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:41 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9bed6e8e-001e-0046-5b8c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150341Z-15767c5fc55qdcd62bsn50hd6s0000000cc000000000t1nc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:41 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:41 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e08726cd-901e-00a0-738c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150341Z-15767c5fc55gq5fmm10nm5qqr80000000cs000000000kfg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:41 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:42 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 766164d5-c01e-0082-668c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150342Z-15767c5fc55tsfp92w7yna557w0000000ckg00000000vkce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:42 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:42 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dcc4dd0d-f01e-0099-7c8c-159171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150342Z-15767c5fc55tsfp92w7yna557w0000000ckg00000000vkck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:42 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:42 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d59d44fd-601e-003e-698c-153248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150342Z-15767c5fc554w2fgapsyvy8ua00000000c5000000000k7sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:42 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:42 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4a2177bf-401e-00a3-638c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150342Z-15767c5fc55gs96cphvgp5f5vc0000000cgg00000000s1bk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:42 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:42 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4da5cae8-a01e-0070-0e8c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150342Z-15767c5fc554wklc0x4mc5pq0w0000000cwg00000000vf34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:42 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:42 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:43 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:43 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 1cc30b66-e01e-0071-368c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150343Z-15767c5fc55d6fcl6x6bw8cpdc0000000cgg00000000qw20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:43 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:43 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:43 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:43 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: b9a19cb7-401e-0078-068c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150343Z-15767c5fc5546rn6ch9zv310e000000005s00000000028up x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:43 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:43 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:43 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0da9586c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150343Z-15767c5fc55472x4k7dmphmadg0000000cdg00000000688k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:43 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:43 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:43 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 8e9c9a52-201e-000c-6b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150343Z-15767c5fc55gq5fmm10nm5qqr80000000cs000000000kfk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:43 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:43 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:43 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:43 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 1cc30bd5-e01e-0071-1a8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150343Z-15767c5fc554l9xf959gp9cb1s00000006rg00000000tvpw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:43 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:43 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:43 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:43 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: b23951fc-501e-005b-2a8c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150343Z-15767c5fc55w69c2zvnrz0gmgw0000000d00000000004637 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:43 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:43 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:43 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:43 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: b9a19e00-401e-0078-388c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150343Z-15767c5fc55fdfx81a30vtr1fw0000000cyg00000000qq1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:43 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:43 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:43 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:43 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 7afec079-601e-000d-468c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150343Z-15767c5fc55kg97hfq5uqyxxaw0000000cr000000000a8u2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:43 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:43 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:44 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:44 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3ef81e2a-f01e-001f-3f8c-155dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150344Z-15767c5fc55xsgnlxyxy40f4m00000000cg000000000s13p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:44 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:44 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:44 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:44 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a68e09c4-f01e-0052-148c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150344Z-15767c5fc55fdfx81a30vtr1fw0000000d40000000000swg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:44 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:44 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:44 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:44 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 6a90313a-301e-005d-1a8c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150344Z-15767c5fc55fdfx81a30vtr1fw0000000cx000000000vtax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:44 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:44 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:44 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:44 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 1392789d-401e-0047-0e8c-158597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150344Z-15767c5fc554wklc0x4mc5pq0w0000000d30000000004pxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:44 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:44 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:44 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:44 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: a76247f8-001e-00a2-558c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150344Z-15767c5fc55n4msds84xh4z67w00000006c000000000f3c7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:44 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:45 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:45 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:45 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4a217eb8-401e-00a3-218c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150345Z-15767c5fc5546rn6ch9zv310e000000005sg000000000gkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:45 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:45 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:45 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:45 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 92784c80-801e-002a-088c-1531dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150345Z-15767c5fc552g4w83buhsr3htc0000000cq000000000fp9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:45 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:45 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:45 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:45 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7afec1f8-601e-000d-328c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150345Z-15767c5fc55472x4k7dmphmadg0000000cbg00000000dk6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:45 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:46 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:46 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6a90350a-301e-005d-348c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150346Z-15767c5fc55dtdv4d4saq7t47n0000000cfg00000000cg60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:46 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:46 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:46 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: c825d9ef-901e-007b-278c-15ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150346Z-15767c5fc55v7j95gq2uzq37a00000000cv000000000pdhp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:46 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:46 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:46 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: ed356ac5-101e-0046-2b8c-1591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150346Z-15767c5fc55d6fcl6x6bw8cpdc0000000cfg00000000t70s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:46 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:46 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:46 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 76616de5-c01e-0082-6f8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150346Z-15767c5fc55dtdv4d4saq7t47n0000000ch0000000006stp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:46 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:46 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 6ec2e3f4-801e-007b-208c-15e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150346Z-15767c5fc55gs96cphvgp5f5vc0000000ck000000000hy2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:46 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:46 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 29534450-901e-0064-768c-15e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150346Z-15767c5fc55whfstvfw43u8fp40000000cv000000000a2wh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:46 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:46 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 0da95f5c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150346Z-15767c5fc554l9xf959gp9cb1s00000006x00000000086y3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:47 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:46 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:46 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 704395e8-201e-005d-718c-15afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150346Z-15767c5fc5546rn6ch9zv310e000000005sg000000000gr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:47 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:47 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 8be9c1e7-301e-0052-678c-1565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150347Z-15767c5fc55gs96cphvgp5f5vc0000000cqg000000000kq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:47 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:47 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: dc68e902-201e-006e-0d8c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150347Z-15767c5fc554l9xf959gp9cb1s00000006w000000000c333 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:47 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:47 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:47 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 21dfe39b-001e-0049-468c-155bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150347Z-15767c5fc554wklc0x4mc5pq0w0000000d1000000000cd8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:47 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:47 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:47 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 82f8cc24-c01e-0014-3a8c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150347Z-15767c5fc55v7j95gq2uzq37a00000000cy000000000az1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:47 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:48 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:48 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ba3c7a68-301e-0099-698c-156683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150348Z-15767c5fc5546rn6ch9zv310e000000005n000000000hxsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:48 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:48 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 819d4321-f01e-0020-6e8c-15956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150348Z-15767c5fc55kg97hfq5uqyxxaw0000000cm000000000rawc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:48 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:48 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 023e591f-a01e-003d-618c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150348Z-15767c5fc55472x4k7dmphmadg0000000cc000000000cfxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:48 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:48 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:48 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 76253f94-c01e-0066-328c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150348Z-15767c5fc5546rn6ch9zv310e000000005n000000000hxst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:48 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:49 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: fb0d4061-601e-0050-198c-152c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150349Z-15767c5fc55sdcjq8ksxt4n9mc00000002200000000065ta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:49 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:49 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 831f1653-b01e-0098-198c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150349Z-15767c5fc55kg97hfq5uqyxxaw0000000cpg00000000feqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:49 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:49 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 89fd357a-501e-008f-758c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150349Z-15767c5fc55lghvzbxktxfqntw0000000ce0000000007svq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:49 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:49 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:49 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7585955c-001e-000b-518c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150349Z-15767c5fc55gq5fmm10nm5qqr80000000csg00000000hspz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:49 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:50 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:50 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: a68e0dd8-f01e-0052-1d8c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150350Z-15767c5fc55lghvzbxktxfqntw0000000cdg000000009bzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:50 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:50 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: b2395a75-501e-005b-038c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150350Z-15767c5fc55qdcd62bsn50hd6s0000000ce000000000kgdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:50 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:50 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:50 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: a7582d38-101e-0028-528c-158f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150350Z-15767c5fc554w2fgapsyvy8ua00000000c8g000000004vkd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:50 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:50 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 757cff4f-401e-000a-528c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150350Z-15767c5fc554wklc0x4mc5pq0w0000000d2g0000000069bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:50 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:50 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:50 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 7baaa16d-b01e-0097-4d8c-154f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150350Z-15767c5fc554wklc0x4mc5pq0w0000000d1000000000cdfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:51 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:50 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:51 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 819d44cb-f01e-0020-6f8c-15956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150351Z-15767c5fc55kg97hfq5uqyxxaw0000000cm000000000rb2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:51 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:50 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:51 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 9bed7ce1-001e-0046-4f8c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150351Z-15767c5fc55n4msds84xh4z67w00000006ag00000000ne1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:51 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:51 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:51 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 89fd37a1-501e-008f-6d8c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150351Z-15767c5fc552g4w83buhsr3htc0000000ck000000000wa82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:51 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:51 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:51 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 9c5056bf-f01e-0003-548c-154453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150351Z-15767c5fc55w69c2zvnrz0gmgw0000000cz00000000076ec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:51 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:51 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:51 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: be019976-401e-0035-5d8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150351Z-15767c5fc55tsfp92w7yna557w0000000ct00000000035rk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:51 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:51 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:51 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 56c891cb-f01e-0085-428c-1588ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150351Z-15767c5fc554w2fgapsyvy8ua00000000c90000000002tzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:51 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:51 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:51 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 42bb1403-701e-005c-578c-15bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150351Z-15767c5fc55tsfp92w7yna557w0000000ct00000000035rn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:51 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:52 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:52 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 2f845d93-b01e-0070-2f8c-151cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150352Z-15767c5fc5546rn6ch9zv310e000000005sg000000000h2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:52 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:52 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:52 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 2d1829d7-b01e-001e-738c-150214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150352Z-15767c5fc55tsfp92w7yna557w0000000cs00000000073f2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:52 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:52 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:52 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: b612907a-401e-008c-278c-1586c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150352Z-15767c5fc554l9xf959gp9cb1s00000006ug00000000gtru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:52 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:52 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:52 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 5f7380a8-801e-0015-7b8c-15f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150352Z-15767c5fc552g4w83buhsr3htc0000000crg000000009pn1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:52 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:53 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:53 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: be019a9f-401e-0035-518c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150353Z-15767c5fc55whfstvfw43u8fp40000000crg00000000r9ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:53 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:53 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:53 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e360128a-801e-0083-498c-15f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150353Z-15767c5fc55gs96cphvgp5f5vc0000000cf000000000wr6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:53 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:53 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:53 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 36a1620f-001e-0028-0f8c-15c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150353Z-15767c5fc55w69c2zvnrz0gmgw0000000d000000000046qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:53 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:53 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:53 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b0a4db7-c01e-00ad-2d8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150353Z-15767c5fc55gs96cphvgp5f5vc0000000cqg000000000m19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:53 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:54 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:54 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 1cc313a1-e01e-0071-4b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150354Z-15767c5fc55xsgnlxyxy40f4m00000000cg000000000s1qk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:54 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:54 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:54 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 4b0a4edd-c01e-00ad-438c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150354Z-15767c5fc55jdxmppy6cmd24bn000000050g0000000027dt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:54 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:54 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:54 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 0dcb9a48-e01e-0003-1c8c-150fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150354Z-15767c5fc55qkvj6n60pxm9mbw00000001x00000000066kw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:54 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:54 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:54 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 4a218e36-401e-00a3-268c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150354Z-15767c5fc55kg97hfq5uqyxxaw0000000cqg00000000bveh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:54 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:54 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:54 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: f1c85a61-d01e-007a-188c-15f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150354Z-15767c5fc55852fxfeh7csa2dn0000000ckg00000000h3gg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:54 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:54 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:54 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: eccf31ce-001e-0079-3e8c-1512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150354Z-15767c5fc55qkvj6n60pxm9mbw00000001yg000000000xcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:55 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:54 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:54 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: b9a1a970-401e-0078-528c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150354Z-15767c5fc55n4msds84xh4z67w00000006b000000000m6cx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:55 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:54 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:54 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: f40770c2-201e-0000-318c-15a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150354Z-15767c5fc55n4msds84xh4z67w00000006cg00000000ccmt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:55 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:55 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:55 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 801e3e61-b01e-0021-2d8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150355Z-15767c5fc55v7j95gq2uzq37a00000000cug00000000r3y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:55 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:55 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:55 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 4f10e0ef-e01e-0085-118c-15c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150355Z-15767c5fc55qkvj6n60pxm9mbw00000001r000000000v4k3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:55 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49894	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:55 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:55 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: b9d89a70-001e-008d-3b8c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150355Z-15767c5fc55qkvj6n60pxm9mbw00000001yg000000000xht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:55 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:55 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:55 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 1f481f42-c01e-002b-6c8c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150355Z-15767c5fc55472x4k7dmphmadg0000000ce0000000004x3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:55 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:03:56 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 15:03:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:03:56 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: 98f51877-f01e-0096-7d8c-1510ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T150356Z-15767c5fc55rg5b7sh1vuv8t7n0000000d40000000000ytd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:03:56 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4960, Parent PID: 1804

General

Target ID:	0
Start time:	11:02:28
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3152, Parent PID: 4960

General

Target ID:	2
Start time:	11:02:32
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2348,i,16853621114823099383,12432706286696347133,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6420, Parent PID: 1804

General

Target ID:	3
Start time:	11:02:35
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 4960, Parent PID: 1804

General

Chronological Activities

Analysis Process: chrome.exePID: 3152, Parent PID: 4960

General

Chronological Activities

Analysis Process: chrome.exePID: 6420, Parent PID: 1804

General

Chronological Activities

Disassembly

Windows Analysis Report
https://cqn-k04.na1.hs-sales-engage.com/Cto/5D+23284/cQn-k04/R5R8b48P3N5SL3sD2fCX4W1S5ccx25ffDkW25fgn_1X0cGqW1Gy2gZ24QZLcW3F5Q481_jQcqW1Q4r3G1Q5MKcn1V3HnF4W1