Edit tour

Windows Analysis Report
https://us-usps-ehzzfw.xyz/update/

Overview

General Information

Sample URL:	https://us-usps-ehzzfw.xyz/update/
Analysis ID:	1526971
Tags:	openphish
Infos:

Errors URL not reachable

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Performs DNS queries to domains with low reputation

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2264 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4256 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2004,i,5905226797290870314,14621505294842415606,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-ehzzfw.xyz/update/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://us-usps-ehzzfw.xyz/update/

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social usering

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49737 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-ehzzfw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-ehzzfw.xyz
Source:	DNS query: us-usps-ehzzfw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-ehzzfw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-ehzzfw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-ehzzfw.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-ehzzfw.xyz
Source:	DNS query: us-usps-ehzzfw.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: us-usps-ehzzfw.xyz
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49737 version: TLS 1.2

Source: classification engine

Classification label: mal52.troj.win@19/0@12/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2004,i,5905226797290870314,14621505294842415606,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-ehzzfw.xyz/update/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2004,i,5905226797290870314,14621505294842415606,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://us-usps-ehzzfw.xyz/update/	100%	SlashNext	Fraudulent Website type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
google.com	142.250.184.206	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
us-usps-ehzzfw.xyz	unknown	unknown	true	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
216.58.206.68	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526971
Start date and time:	2024-10-06 18:41:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 1m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us-usps-ehzzfw.xyz/update/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.troj.win@19/0@12/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	URL browsing timeout or error

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 142.250.185.142, 64.233.166.84, 34.104.35.123, 184.28.90.27, 4.175.87.197, 192.229.221.95, 20.3.187.198, 199.232.210.172
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, clients2.google.com, ocsp.digicert.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://us-usps-ehzzfw.xyz/update/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 18:41:52.109383106 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:41:52.202958107 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:41:52.343647003 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:42:00.606308937 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:00.606343031 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:00.606401920 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:00.606987953 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:00.607002020 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:01.412081957 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:01.412161112 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:01.441056967 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:01.441072941 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:01.441436052 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:01.537838936 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:01.537895918 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:01.537905931 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:01.538008928 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:01.579443932 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:01.715238094 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:01.715585947 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:01.715668917 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:01.716569901 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:01.716587067 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:01.751545906 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:42:01.845365047 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:42:01.952395916 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:42:03.667412043 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 6, 2024 18:42:03.667531967 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:42:05.908515930 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:05.908550024 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:05.908606052 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:05.908957005 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:05.908970118 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.290360928 CEST	49719	443	192.168.2.6	216.58.206.68
Oct 6, 2024 18:42:06.290380001 CEST	443	49719	216.58.206.68	192.168.2.6
Oct 6, 2024 18:42:06.290608883 CEST	49719	443	192.168.2.6	216.58.206.68
Oct 6, 2024 18:42:06.291414022 CEST	49719	443	192.168.2.6	216.58.206.68
Oct 6, 2024 18:42:06.291424990 CEST	443	49719	216.58.206.68	192.168.2.6
Oct 6, 2024 18:42:06.488580942 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.488652945 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.542857885 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.542874098 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.543852091 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.584124088 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.631403923 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.685390949 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.685468912 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.685492039 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.685530901 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.685594082 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.685594082 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.685602903 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.685626030 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.685682058 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.767549992 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.767626047 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.767704010 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.767729998 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.767798901 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.768096924 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.769371033 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.769431114 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.769471884 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.769479036 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.769501925 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.770006895 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.853050947 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.853127956 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.853213072 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.853241920 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.853306055 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.853429079 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.854490995 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.854516029 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.854696035 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.854702950 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.855540037 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.856844902 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.856868982 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.856992006 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.856992960 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.857000113 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.857207060 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.858774900 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.858799934 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.858867884 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.858874083 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.858921051 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.858921051 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.939655066 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.939733982 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.939835072 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.939835072 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.939842939 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.939892054 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.941015005 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.941061974 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.941147089 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.941147089 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.941154003 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.941296101 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.942882061 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.942925930 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.942970991 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.942975998 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.943026066 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.943026066 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.943732977 CEST	443	49719	216.58.206.68	192.168.2.6
Oct 6, 2024 18:42:06.943876028 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.943924904 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.943975925 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.943980932 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.944024086 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.944035053 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.945543051 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.945570946 CEST	49719	443	192.168.2.6	216.58.206.68
Oct 6, 2024 18:42:06.945580006 CEST	443	49719	216.58.206.68	192.168.2.6
Oct 6, 2024 18:42:06.945589066 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.945638895 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.945643902 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.945688009 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.945785999 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.946880102 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.946930885 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.946957111 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.946960926 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.947086096 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.947128057 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.947133064 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.947141886 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.947232008 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:06.947257042 CEST	443	49719	216.58.206.68	192.168.2.6
Oct 6, 2024 18:42:06.947293043 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.947324038 CEST	49719	443	192.168.2.6	216.58.206.68
Oct 6, 2024 18:42:06.956125975 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:06.956137896 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.094620943 CEST	49719	443	192.168.2.6	216.58.206.68
Oct 6, 2024 18:42:07.094835043 CEST	443	49719	216.58.206.68	192.168.2.6
Oct 6, 2024 18:42:07.128602028 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.128638983 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.128901958 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.132303953 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.132355928 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.132425070 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.133416891 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.133424997 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.133482933 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.135648966 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.135665894 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.135824919 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.136746883 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.136764050 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.136837006 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.136852980 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.137013912 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.137028933 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.138380051 CEST	49719	443	192.168.2.6	216.58.206.68
Oct 6, 2024 18:42:07.138396025 CEST	443	49719	216.58.206.68	192.168.2.6
Oct 6, 2024 18:42:07.139435053 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.139528990 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.139619112 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.140144110 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.140185118 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.140439034 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.140449047 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.185266972 CEST	49719	443	192.168.2.6	216.58.206.68
Oct 6, 2024 18:42:07.785295010 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.785321951 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.786036968 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.786056042 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.786367893 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.786422968 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.786725044 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.786731958 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.787229061 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.787242889 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.804069996 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.804652929 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.804696083 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.805520058 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.805530071 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.812860966 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.813359022 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.813376904 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.814090014 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.814095020 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.884653091 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.884799004 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.884866953 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.885318995 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.885376930 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.885438919 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.885448933 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.885492086 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.885503054 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.885555029 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.887851000 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.887897968 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.890697956 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.890713930 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.890723944 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.890728951 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.899970055 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.900016069 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.900079012 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.901845932 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.901906967 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.901977062 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.902354002 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.902369976 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.902755022 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.902784109 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.912992954 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.913152933 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.913255930 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.913604021 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.913604021 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.913636923 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.913660049 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.917531013 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.917546988 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.917618036 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.917726994 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.917748928 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.917814970 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.917823076 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.917958021 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.917969942 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.918436050 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.918483973 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.918565989 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.918570042 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.918585062 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.918589115 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.924668074 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.924725056 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:07.924822092 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.925142050 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:07.925167084 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.442468882 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.443219900 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.443305016 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.444689035 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.444703102 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.664994955 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.665393114 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.665712118 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.665731907 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.665923119 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.665923119 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.666340113 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.666347027 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.666951895 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.666995049 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.668081045 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.668090105 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.668344021 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.668389082 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.668862104 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.668875933 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.669215918 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.669239044 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.670242071 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.670248032 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.763652086 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.763717890 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.764255047 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.764395952 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.764396906 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.764446974 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.764477015 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.766491890 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.766769886 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.766832113 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.766927004 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.766942978 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.768814087 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.768878937 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.768981934 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.770313025 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.770344973 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.770483017 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.770585060 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.770603895 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.770618916 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.770626068 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.772780895 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.772798061 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.775415897 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.775440931 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.775835991 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.776220083 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.776237011 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.776312113 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.776341915 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:08.776416063 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.776741028 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:08.776751995 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.414714098 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.415267944 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.415292978 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.415760994 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.415761948 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.415766001 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.416048050 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.416074991 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.416374922 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.416383982 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.441529036 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.441941977 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.442006111 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.442361116 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.442377090 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.513364077 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.513533115 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.513664961 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.513873100 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.513873100 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.513895988 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.513909101 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.516149998 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.516235113 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.516284943 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.516352892 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.516379118 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.516392946 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.516401052 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.516864061 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.516900063 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.516974926 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.517131090 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.517158031 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.518898964 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.518954992 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.519011974 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.519121885 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.519143105 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.554606915 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.554796934 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.554862976 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.554908991 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.554933071 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.554949999 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.554959059 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.557554960 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.557600021 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.557770014 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.557895899 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:09.557909012 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:09.731429100 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:09.731496096 CEST	443	49737	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:09.731544971 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:09.733565092 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:09.733598948 CEST	443	49737	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:10.184547901 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.185085058 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.185110092 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.186172962 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.186183929 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.200390100 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.200784922 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.200829983 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.200908899 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.201785088 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.201792955 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.202410936 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.202428102 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.202801943 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.202807903 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.288094044 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.288222075 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.288482904 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.288552046 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.288552046 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.288579941 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.288593054 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.292763948 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.292823076 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.292896032 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.293045998 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.293056011 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.305279016 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.305429935 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.305527925 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.307902098 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.307959080 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.308032036 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.317948103 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.317974091 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.327889919 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.328036070 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.328119993 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.333229065 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.333246946 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.333257914 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.333262920 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.334358931 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.334384918 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.334405899 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.334413052 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.337081909 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.337116957 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.337285042 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.338404894 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.338496923 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.338573933 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.339680910 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.339701891 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.339724064 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.339735031 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.339878082 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.340105057 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.340137959 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.340219021 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.340231895 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.543623924 CEST	443	49737	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:10.543731928 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:10.546670914 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:10.546681881 CEST	443	49737	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:10.547461987 CEST	443	49737	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:10.591638088 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:10.615053892 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:10.615400076 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:10.615412951 CEST	443	49737	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:10.616118908 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:10.663399935 CEST	443	49737	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:10.793687105 CEST	443	49737	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:10.793791056 CEST	443	49737	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:10.797594070 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:10.933423996 CEST	49737	443	192.168.2.6	40.115.3.253
Oct 6, 2024 18:42:10.933449030 CEST	443	49737	40.115.3.253	192.168.2.6
Oct 6, 2024 18:42:10.961695910 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.972560883 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.972575903 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.973067999 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.973073959 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.974750042 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.975220919 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.975234032 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.975614071 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.975630999 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.984173059 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.984875917 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.984920025 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:10.985812902 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:10.985827923 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.006347895 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.006936073 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.006961107 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.007515907 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.007520914 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.233316898 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.233385086 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.233428955 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.233483076 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.233628988 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.233674049 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.233676910 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.233695984 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.233707905 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.233712912 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.233720064 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.233769894 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.233839989 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.235718966 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.235718966 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.235764027 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.235791922 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.237010956 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.237010956 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.237025023 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.237035036 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.239753008 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.239788055 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.239948034 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.240298986 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.240313053 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.241970062 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.242029905 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.242094994 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.242233992 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.242264986 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.243221045 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.243277073 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.243330002 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.243478060 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.243494034 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.329381943 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.329466105 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.329562902 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.333287954 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.333304882 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.333446026 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.333451986 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.337915897 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.337971926 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.338023901 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.338290930 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.338309050 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.624025106 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.624083042 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.624150991 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.624166965 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.624228001 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.624550104 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.624550104 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.624597073 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.624634027 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.627679110 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.627733946 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.627809048 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.628015041 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.628032923 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.880758047 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.880851030 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.881256104 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.881279945 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.881367922 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.881388903 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.881717920 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.881722927 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.882018089 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.882023096 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.924758911 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.925276041 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.925307989 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.925806046 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.925812960 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.979871035 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.979959965 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.980166912 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.980166912 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.980235100 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.980252028 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.984915972 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.984973907 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.985124111 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.985182047 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.985248089 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.985259056 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.985275030 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.985306978 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.985467911 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.985485077 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.985518932 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.985527992 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.987442017 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.987473011 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.987674952 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.987674952 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:11.987699032 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:11.999756098 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.000272989 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.000319958 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.000750065 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.000757933 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.029685020 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.029750109 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.029865980 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.030008078 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.030009031 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.030036926 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.030049086 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.032577038 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.032624006 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.032838106 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.032963037 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.032988071 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.110678911 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.110764027 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.112493038 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.112493038 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.112541914 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.112562895 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.114609003 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.114672899 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.114857912 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.114936113 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.114945889 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.269850969 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.270739079 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.270739079 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.270770073 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.270791054 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.370312929 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.370389938 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.370487928 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.370662928 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.370683908 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.370716095 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.370723009 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.373251915 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.373347044 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.373497963 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.379753113 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.379793882 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.637845039 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.639163971 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.639163971 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.639230013 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.639275074 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.646110058 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.646785975 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.646801949 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.647228003 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.647234917 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.675288916 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.675932884 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.675961971 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.677304983 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.677320004 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.736752033 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.736910105 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.737112045 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.737112045 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.737222910 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.737265110 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.739931107 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.739974022 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.740128994 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.740247011 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.740257978 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.746468067 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.746536016 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.746790886 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.746792078 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.746792078 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.752000093 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.752047062 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.753710032 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.753710032 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.753765106 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.774008036 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.774089098 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.774354935 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.774640083 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.774665117 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.774693966 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.774702072 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.777283907 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.777328014 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.781394958 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.781558037 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.781575918 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.784698963 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.786015987 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.786046982 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.787944078 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.787951946 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.887948036 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.888134003 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.888439894 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.888439894 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.888627052 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.888650894 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.893271923 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.893316031 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:12.897530079 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.897530079 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:12.897574902 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.049429893 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.049464941 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.054193020 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.058568954 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.058604956 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.059252024 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.059258938 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.159881115 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.159954071 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.160006046 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.160238981 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.160267115 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.160279989 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.160285950 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.162898064 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.162941933 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.163232088 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.163377047 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.163403034 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.405925989 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.406343937 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.406388998 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.406905890 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.406913996 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.442887068 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.443316936 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.443350077 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.443778992 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.443785906 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.506473064 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.506625891 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.506803036 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.506855965 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.506880999 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.506896019 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.506902933 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.509601116 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.509638071 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.509879112 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.510098934 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.510113001 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.546134949 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.546232939 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.546320915 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.546394110 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.546416044 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.546435118 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.546442986 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.549725056 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.549761057 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.549828053 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.550008059 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.550019979 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.565120935 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.565550089 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.565562010 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.565984964 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.565994978 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.667695999 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.667809963 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.667881966 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.668128014 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.668149948 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.668164015 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.668169022 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.671305895 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.671324968 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.671408892 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.671591043 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.671602011 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.671744108 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.672163010 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.672226906 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.672775030 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.672790051 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.770142078 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.770236015 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.770313978 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.770593882 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.770636082 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.770663023 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.770679951 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.773869038 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.773910999 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.773996115 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.774228096 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.774245977 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.798410892 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.798923969 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.798940897 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.799493074 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.799498081 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.897089958 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.897155046 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.897212029 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.897466898 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.897486925 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.897522926 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.897542000 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.901165009 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.901194096 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:13.901396036 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.901479959 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:13.901494980 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.167419910 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.167960882 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.167975903 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.168615103 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.168620110 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.184005976 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.184444904 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.184456110 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.184835911 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.184842110 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.268610001 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.268666983 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.268794060 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.268971920 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.268980026 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.268990993 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.268996000 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.272001028 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.272042036 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.272125959 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.272341013 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.272356033 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.283452988 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.283548117 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.283622980 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.283654928 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.283669949 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.283679008 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.283684015 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.285882950 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.285893917 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.285958052 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.286109924 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.286119938 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.322328091 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.322803974 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.322819948 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.323390007 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.323394060 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.421195030 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.421351910 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.421411991 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.421731949 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.421751976 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.421761990 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.421766996 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.427787066 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.427871943 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.427963972 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.428203106 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.428236961 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.451178074 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.451761007 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.451771975 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.452552080 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.452558041 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.532053947 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.532715082 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.532746077 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.533302069 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.533309937 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.580321074 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.580481052 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.580560923 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.580874920 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.580883980 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.580893040 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.580897093 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.584254026 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.584274054 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.584453106 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.584700108 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.584712029 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.650888920 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.650957108 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.651038885 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.651289940 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.651308060 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.651320934 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.651328087 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.654649019 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.654680967 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.654772043 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.655050039 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.655066013 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.930651903 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.931464911 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.931495905 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.935609102 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.935616970 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.958311081 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.958946943 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.958965063 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:14.959614992 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:14.959619045 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.033796072 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.033955097 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.034030914 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.038855076 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.038871050 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.042510033 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.042546988 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.042983055 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.043571949 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.043587923 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.061064005 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.061115980 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.061228037 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.064430952 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.064444065 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.064452887 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.064459085 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.074779987 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.074817896 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.075239897 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.076781988 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.076795101 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.133479118 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.134210110 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.134233952 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.137113094 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.137120962 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.234323025 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.234463930 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.234672070 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.234749079 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.234771013 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.234782934 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.234788895 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.239104986 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.239136934 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.239232063 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.239667892 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.239684105 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.247925043 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.248606920 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.248632908 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.249367952 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.249386072 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.331459999 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.333612919 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.333631992 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.350868940 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.350930929 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.351139069 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.379344940 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.379357100 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.391675949 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.391675949 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.391690016 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.391701937 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.437664032 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.437700033 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.437764883 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.441874981 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.441900015 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.480390072 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.480475903 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.480657101 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.488749981 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.488764048 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.500041962 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.500092983 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.500161886 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.500677109 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.500689983 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.679841042 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.680535078 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.680581093 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.680963039 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.680977106 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.739979982 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.740433931 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.740461111 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.740866899 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.740871906 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.783471107 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.783526897 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.783622026 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.783795118 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.783813953 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.783826113 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.783830881 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.786508083 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.786597013 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.786771059 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.786917925 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.786967993 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.844094038 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.844185114 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.844316959 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.844443083 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.844482899 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.844504118 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.844513893 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.846980095 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.847022057 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.847220898 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.847419977 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.847438097 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.908083916 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.908478022 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.908498049 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:15.908915997 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:15.908921957 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.026518106 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.026676893 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.026813984 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.028719902 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.028736115 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.028835058 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.028841972 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.041846991 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.041868925 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.042180061 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.042670965 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.042687893 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.108795881 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.110551119 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.110572100 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.111293077 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.111299038 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.135718107 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.136842966 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.136869907 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.137676954 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.137685061 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.254959106 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.255031109 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.255079031 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.256934881 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.256953001 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.256994963 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.257003069 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.260566950 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.260652065 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.261394024 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.261651039 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.261672020 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.261683941 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.261691093 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.265173912 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.265208960 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.265286922 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.267436981 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.267452955 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.267522097 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.267765999 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.267779112 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.269375086 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.269387960 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.509999990 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.542632103 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.550067902 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.553630114 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.553644896 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.554617882 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.554624081 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.555458069 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.555485964 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.557080984 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.557096004 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.649667978 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.655945063 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.656095028 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.656188011 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.659732103 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.659811020 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.660044909 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.662311077 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.662343979 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.663131952 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.663140059 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.663660049 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.663677931 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.663690090 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.663695097 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.665033102 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.665052891 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.728322983 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.728375912 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.728425980 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.731010914 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.731029034 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.732840061 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.732853889 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.732997894 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.733114958 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.733129978 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.763358116 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.763456106 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.763719082 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.763839006 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.763866901 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.763880968 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.763887882 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.768223047 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.768271923 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.768352985 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.768605947 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.768623114 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.877024889 CEST	443	49719	216.58.206.68	192.168.2.6
Oct 6, 2024 18:42:16.877139091 CEST	443	49719	216.58.206.68	192.168.2.6
Oct 6, 2024 18:42:16.877202034 CEST	49719	443	192.168.2.6	216.58.206.68
Oct 6, 2024 18:42:16.924451113 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.925892115 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.925920010 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.926897049 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.926903963 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.931822062 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.932462931 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.932507038 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:16.933052063 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:16.933070898 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.024509907 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.024585962 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.024739027 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.025285959 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.025285959 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.025310993 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.025321960 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.029388905 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.029438972 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.029512882 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.030318975 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.030338049 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.072551012 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.072711945 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.072783947 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.072839022 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.072866917 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.072882891 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.072894096 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.075373888 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.075419903 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.075478077 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.075634003 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.075649977 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.370671034 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.371164083 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.371197939 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.371684074 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.371697903 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.380759001 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.381198883 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.381218910 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.381594896 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.381602049 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.411099911 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.411556005 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.411571026 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.412116051 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.412122011 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.469935894 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.470024109 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.470235109 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.470560074 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.470580101 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.478027105 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.478096008 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.478188038 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.478669882 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.478687048 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.481755972 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.481842041 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.481911898 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.482548952 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.482556105 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.482564926 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.482570887 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.486573935 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.486624002 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.486690998 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.487273932 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.487297058 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.511754036 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.511836052 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.512238026 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.512238026 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.513546944 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.513570070 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.515866995 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.515903950 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.516283035 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.516493082 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.516505003 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.668123007 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.668927908 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.668967962 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.669852972 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.669868946 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.711605072 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.712328911 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.712351084 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.713223934 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.713229895 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.766572952 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.766670942 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.766741991 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.767287016 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.767318010 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.767338037 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.767347097 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.772262096 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.772309065 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.772445917 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.772821903 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.772836924 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.814088106 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.814177990 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.814282894 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.814914942 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.814944029 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.814959049 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.814975977 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.820667028 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.820693970 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:17.821104050 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.821506977 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:17.821517944 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.125123024 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.150980949 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.175046921 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.175894022 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.175901890 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.177438974 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.177459002 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.190340042 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.190361023 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.190949917 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.190956116 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.275124073 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.275211096 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.275381088 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.276943922 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.276977062 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.276998043 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.277005911 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.285929918 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.285964012 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.286113977 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.286722898 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.286737919 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.287466049 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.287525892 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.287573099 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.288027048 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.288034916 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.288094044 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.288099051 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.294440031 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.294490099 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.294560909 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.295506001 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.295525074 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.365231037 CEST	49719	443	192.168.2.6	216.58.206.68
Oct 6, 2024 18:42:18.365264893 CEST	443	49719	216.58.206.68	192.168.2.6
Oct 6, 2024 18:42:18.426472902 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.427557945 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.427581072 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.428428888 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.428435087 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.526439905 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.526622057 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.526727915 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.527316093 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.527338028 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.530632973 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.530678034 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.530819893 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.531121969 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.531136036 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.953094959 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.953924894 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.953947067 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.954178095 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.954533100 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.954550982 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.954703093 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.954746962 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:18.955231905 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:18.955239058 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.055857897 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.056031942 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.056153059 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.056212902 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.056232929 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.056246996 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.056255102 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.059298992 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.059328079 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.059407949 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.059576035 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.059588909 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.061228037 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.061291933 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.061378956 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.061553955 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.061553955 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.061574936 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.061585903 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.063940048 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.063967943 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.064037085 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.064176083 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.064188957 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.172473907 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.173104048 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.173115015 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.173927069 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.173930883 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.302953005 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.303028107 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.303090096 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.303287029 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.303308010 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.303318977 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.303339005 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.306433916 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.306451082 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.306586981 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.306874037 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.306890011 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.698513985 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.699357986 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.699389935 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.699848890 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.699853897 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.712449074 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.712877035 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.712903023 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.713496923 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.713505983 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.799438000 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.799516916 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.799896955 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.799972057 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.799994946 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.800008059 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.800013065 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.803503036 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.803529024 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.803591013 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.803719044 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.803730965 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.813796043 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.813874006 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.814037085 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.814074039 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.814074039 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.814094067 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.814104080 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.816822052 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.816860914 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.816937923 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.817296982 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:19.817323923 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:19.984652042 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.034460068 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.186559916 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.186575890 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.187247992 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.187252998 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.289060116 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.289149046 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.289206982 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.306332111 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.306360006 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.306372881 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.306380033 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.315826893 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.315857887 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.315922976 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.316956997 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.316972017 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.322329998 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.323321104 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.323362112 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.324430943 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.324438095 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.382240057 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.383009911 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.383047104 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.383627892 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.383635044 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.426038027 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.426206112 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.426300049 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.426606894 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.426606894 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.426642895 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.426661015 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.429641962 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.429663897 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.429734945 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.429950953 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.429964066 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.441513062 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.441987991 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.442044973 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.442581892 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.442600965 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.482479095 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.482558012 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.482626915 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.482741117 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.482759953 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.482772112 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.482778072 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.484939098 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.485627890 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.485637903 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.486088037 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.486092091 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.486207008 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.486238956 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.486304045 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.486493111 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.486506939 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.540682077 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.540765047 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.540826082 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.540966034 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.540980101 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.540988922 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.540993929 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.544599056 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.544630051 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.544701099 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.544980049 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.544994116 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.587568045 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.587719917 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.587780952 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.587878942 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.587893009 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.587904930 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.587909937 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.590529919 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.590553045 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.590616941 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.590835094 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.590848923 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.973440886 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.974308968 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.974344015 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:20.974935055 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:20.974942923 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.075639963 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.075819016 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.076016903 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.076016903 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.076246023 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.076266050 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.079308033 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.079349995 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.079714060 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.079853058 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.079864979 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.095195055 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.095778942 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.095812082 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.096489906 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.096496105 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.125814915 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.126707077 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.126725912 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.129317045 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.129324913 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.192943096 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.193471909 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.193494081 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.194267988 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.194286108 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.199054956 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.199210882 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.199307919 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.199589968 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.199605942 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.199629068 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.199635029 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.202660084 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.202687025 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.205600977 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.205837011 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.205852985 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.225408077 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.225486040 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.225845098 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.226176023 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.226197004 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.226223946 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.226231098 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.230926991 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.236316919 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.236344099 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.237066031 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.237073898 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.238374949 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.238429070 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.238502979 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.238699913 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.238718987 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.293015957 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.293065071 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.293220043 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.293235064 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.293293953 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.293471098 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.293471098 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.293490887 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.293524981 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.293531895 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.307199001 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.307235956 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.307334900 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.307570934 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.307584047 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.331783056 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.331931114 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.332058907 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.332305908 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.332315922 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.332348108 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.332354069 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.335500002 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.335587978 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.335741997 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.335895061 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.335930109 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.741905928 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.743031025 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.743031025 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.743040085 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.743051052 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.761998892 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.762981892 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.762981892 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.763005018 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.763021946 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.848936081 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.849015951 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.849282980 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.849282980 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.849320889 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.849338055 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.852479935 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.852514029 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.852700949 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.852761984 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.852767944 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.862451077 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.862485886 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.862668991 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.862695932 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.862842083 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.862896919 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.862896919 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.862924099 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.862976074 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.862989902 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.865761042 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.865786076 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.866173029 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.866173029 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.866200924 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.883652925 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.884707928 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.884707928 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.884748936 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.884761095 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.956094980 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.956835032 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.956862926 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.957619905 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.957624912 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.975359917 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.975992918 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.976025105 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.976613045 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.976619005 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.981863022 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.981878996 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.981942892 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.981965065 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.982036114 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.982312918 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.982333899 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.982361078 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.982367992 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.985774994 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.985820055 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:21.985889912 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.986052036 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:21.986068964 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.056992054 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.057028055 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.057125092 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.057420969 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.057420969 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.057502985 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.057502985 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.057521105 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.057529926 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.061064005 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.061096907 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.061194897 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.061351061 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.061361074 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.077974081 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.078089952 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.078296900 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.078362942 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.078378916 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.078392029 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.078397989 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.081629992 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.081669092 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.081835985 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.082017899 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.082031012 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.515957117 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.516484022 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.516499043 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.517152071 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.517157078 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.520232916 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.520646095 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.520658016 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.521425962 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.521433115 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.561593056 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.562011003 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.562038898 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.562599897 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.562606096 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.620954990 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.621453047 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.621510029 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.621556044 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.621556044 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.621571064 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.621578932 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.622808933 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.622970104 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.623233080 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.623366117 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.623373985 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.625077009 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.625112057 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.626456022 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.626477003 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.626496077 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.626549006 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.626733065 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.626744986 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.626836061 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.626847029 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.660089016 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.660168886 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.660218000 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.660346031 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.660356998 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.660367966 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.660372972 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.662547112 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.662590981 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.662650108 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.662751913 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.662770987 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.697767973 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.698173046 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.698184013 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.698658943 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.698662996 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.721744061 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.722246885 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.722259045 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.722685099 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.722688913 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.796176910 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.796276093 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.796391010 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.796513081 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.796535969 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.796547890 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.796554089 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.800051928 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.800088882 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.800146103 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.800348997 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.800363064 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.821336985 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.821701050 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.821785927 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.821919918 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.821937084 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.821954966 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.821963072 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.824985027 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.825021982 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:22.825212002 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.825212955 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:22.825239897 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.264688969 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.265337944 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.265347958 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.265877008 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.265882015 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.311433077 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.312033892 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.312056065 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.312731028 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.312737942 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.328264952 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.328798056 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.328840971 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.329380035 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.329389095 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.364011049 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.364159107 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.364216089 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.364538908 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.364567995 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.364574909 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.364582062 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.367760897 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.367856026 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.367965937 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.368093967 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.368119001 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.413340092 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.413564920 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.413657904 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.413885117 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.413908958 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.417834997 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.417861938 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.417933941 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.418216944 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.418232918 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.430880070 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.431077003 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.431204081 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.431257963 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.431257963 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.431298971 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.431323051 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.434012890 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.434051991 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.434276104 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.434406042 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.434417009 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.444446087 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.445116043 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.445126057 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.445552111 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.445555925 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.460963964 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.461539984 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.461560011 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.462284088 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.462287903 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.547678947 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.547847033 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.547915936 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.548139095 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.548177004 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.548198938 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.548204899 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.551664114 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.551706076 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.551803112 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.552018881 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.552031994 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.559835911 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.560023069 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.560075045 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.560148954 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.560148954 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.560359001 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.560359001 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.560370922 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.560379028 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.563268900 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.563311100 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:42:23.563472986 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.563642025 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:42:23.563661098 CEST	443	49823	13.107.246.45	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 18:42:01.532218933 CEST	53	54507	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:01.584913969 CEST	53	55163	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:02.560710907 CEST	53	61923	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:02.849184990 CEST	54666	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:02.849292040 CEST	57606	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:02.858253956 CEST	53	57606	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:02.863802910 CEST	53	54666	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:02.868999958 CEST	52587	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:02.884310007 CEST	53	52587	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:02.966926098 CEST	63723	53	192.168.2.6	8.8.8.8
Oct 6, 2024 18:42:02.974910975 CEST	55939	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:02.975120068 CEST	53	63723	8.8.8.8	192.168.2.6
Oct 6, 2024 18:42:02.981774092 CEST	53	55939	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:03.971175909 CEST	64674	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:03.971286058 CEST	64101	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:03.981019974 CEST	53	64101	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:03.981777906 CEST	53	64674	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:06.280760050 CEST	54034	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:06.281558037 CEST	51293	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:06.288681984 CEST	53	54034	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:06.289072990 CEST	53	51293	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:08.994699001 CEST	59857	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:08.995368004 CEST	59325	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:09.004951000 CEST	53	59857	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:09.017398119 CEST	53	59325	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:09.039195061 CEST	56311	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:42:09.053035021 CEST	53	56311	1.1.1.1	192.168.2.6
Oct 6, 2024 18:42:19.559225082 CEST	53	57743	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 18:42:02.849184990 CEST	192.168.2.6	1.1.1.1	0xa671	Standard query (0)	us-usps-ehzzfw.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:02.849292040 CEST	192.168.2.6	1.1.1.1	0x465d	Standard query (0)	us-usps-ehzzfw.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:42:02.868999958 CEST	192.168.2.6	1.1.1.1	0x2d69	Standard query (0)	us-usps-ehzzfw.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:02.966926098 CEST	192.168.2.6	8.8.8.8	0x51ca	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:02.974910975 CEST	192.168.2.6	1.1.1.1	0xcb39	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:03.971175909 CEST	192.168.2.6	1.1.1.1	0xfb13	Standard query (0)	us-usps-ehzzfw.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:03.971286058 CEST	192.168.2.6	1.1.1.1	0xec6	Standard query (0)	us-usps-ehzzfw.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:42:06.280760050 CEST	192.168.2.6	1.1.1.1	0xf577	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:06.281558037 CEST	192.168.2.6	1.1.1.1	0xcc46	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 18:42:08.994699001 CEST	192.168.2.6	1.1.1.1	0x506f	Standard query (0)	us-usps-ehzzfw.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:08.995368004 CEST	192.168.2.6	1.1.1.1	0x41c1	Standard query (0)	us-usps-ehzzfw.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:42:09.039195061 CEST	192.168.2.6	1.1.1.1	0x71e8	Standard query (0)	us-usps-ehzzfw.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 18:42:02.858253956 CEST	1.1.1.1	192.168.2.6	0x465d	Name error (3)	us-usps-ehzzfw.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:42:02.863802910 CEST	1.1.1.1	192.168.2.6	0xa671	Name error (3)	us-usps-ehzzfw.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:02.884310007 CEST	1.1.1.1	192.168.2.6	0x2d69	Name error (3)	us-usps-ehzzfw.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:02.975120068 CEST	8.8.8.8	192.168.2.6	0x51ca	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:02.981774092 CEST	1.1.1.1	192.168.2.6	0xcb39	No error (0)	google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:03.981019974 CEST	1.1.1.1	192.168.2.6	0xec6	Name error (3)	us-usps-ehzzfw.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:42:03.981777906 CEST	1.1.1.1	192.168.2.6	0xfb13	Name error (3)	us-usps-ehzzfw.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:05.907869101 CEST	1.1.1.1	192.168.2.6	0x9c9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:42:05.907869101 CEST	1.1.1.1	192.168.2.6	0x9c9	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:06.288681984 CEST	1.1.1.1	192.168.2.6	0xf577	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:06.289072990 CEST	1.1.1.1	192.168.2.6	0xcc46	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 18:42:09.004951000 CEST	1.1.1.1	192.168.2.6	0x506f	Name error (3)	us-usps-ehzzfw.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:09.017398119 CEST	1.1.1.1	192.168.2.6	0x41c1	Name error (3)	us-usps-ehzzfw.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:42:09.053035021 CEST	1.1.1.1	192.168.2.6	0x71e8	Name error (3)	us-usps-ehzzfw.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:12.795340061 CEST	1.1.1.1	192.168.2.6	0xc453	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:42:12.795340061 CEST	1.1.1.1	192.168.2.6	0xc453	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:14.391658068 CEST	1.1.1.1	192.168.2.6	0x2cd7	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:42:14.391658068 CEST	1.1.1.1	192.168.2.6	0x2cd7	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:01 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 33 59 41 53 6f 57 6f 6a 2f 55 43 6c 65 2f 34 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 66 37 33 64 35 39 32 66 65 35 39 63 32 32 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 3YASoWoj/UCle/4Z.1Context: cf73d592fe59c225
2024-10-06 16:42:01 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-06 16:42:01 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 33 59 41 53 6f 57 6f 6a 2f 55 43 6c 65 2f 34 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 66 37 33 64 35 39 32 66 65 35 39 63 32 32 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 3YASoWoj/UCle/4Z.2Context: cf73d592fe59c225<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi
2024-10-06 16:42:01 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 33 59 41 53 6f 57 6f 6a 2f 55 43 6c 65 2f 34 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 66 37 33 64 35 39 32 66 65 35 39 63 32 32 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 3YASoWoj/UCle/4Z.3Context: cf73d592fe59c225<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-06 16:42:01 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-06 16:42:01 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 34 62 53 72 41 6b 58 2f 58 6b 36 53 42 31 51 52 61 77 6e 75 38 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 4bSrAkX/Xk6SB1QRawnu8w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:06 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:06 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:06 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164206Z-1657d5bbd48vhs7r2p1ky7cs5w00000002fg00000000kqbc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:06 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-06 16:42:06 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-06 16:42:06 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-06 16:42:06 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-06 16:42:06 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-06 16:42:06 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-06 16:42:06 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-06 16:42:06 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-06 16:42:06 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-06 16:42:06 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:07 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:07 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164207Z-1657d5bbd482krtfgrg72dfbtn000000020g000000008thv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:07 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:07 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:07 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164207Z-1657d5bbd48brl8we3nu8cxwgn00000002dg00000000tsuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:07 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:07 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 28f6fc08-301e-0020-466a-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164207Z-1657d5bbd48sqtlf1huhzuwq70000000021g000000004xt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:07 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:07 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c62b5fc1-401e-0067-3a60-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164207Z-1657d5bbd48gqrfwecymhhbfm8000000012000000000c1yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:07 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:08 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:11 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164211Z-1657d5bbd48762wn1qw4s5sd3000000001zg00000000svhc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:11 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:08 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164208Z-1657d5bbd482lxwq1dp2t1zwkc00000001x000000000p8bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:08 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164208Z-1657d5bbd48tnj6wmberkg2xy8000000028g00000000m8x6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:08 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:08 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164208Z-1657d5bbd48sqtlf1huhzuwq7000000001zg00000000be87 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:08 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:08 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:10 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164210Z-1657d5bbd48qjg85buwfdynm5w00000002e0000000000u8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:10 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:09 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:09 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164209Z-1657d5bbd48tnj6wmberkg2xy800000002dg000000001p6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:09 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:09 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164209Z-1657d5bbd48xsz2nuzq4vfrzg8000000025000000000709w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:09 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164209Z-1657d5bbd48sqtlf1huhzuwq7000000001z000000000eew7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:10 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164210Z-1657d5bbd48gqrfwecymhhbfm8000000010g00000000hyud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:10 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164210Z-1657d5bbd48q6t9vvmrkd293mg000000025g00000000grs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:10 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164210Z-1657d5bbd48dfrdj7px744zp8s000000022g00000000385m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49737	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:10 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 77 55 71 79 42 61 73 48 37 55 69 6f 74 44 66 67 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 32 64 62 64 64 63 38 35 61 36 32 61 33 37 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: wUqyBasH7UiotDfg.1Context: 52dbddc85a62a373
2024-10-06 16:42:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-06 16:42:10 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 77 55 71 79 42 61 73 48 37 55 69 6f 74 44 66 67 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 32 64 62 64 64 63 38 35 61 36 32 61 33 37 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: wUqyBasH7UiotDfg.2Context: 52dbddc85a62a373<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi
2024-10-06 16:42:10 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 77 55 71 79 42 61 73 48 37 55 69 6f 74 44 66 67 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 32 64 62 64 64 63 38 35 61 36 32 61 33 37 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: wUqyBasH7UiotDfg.3Context: 52dbddc85a62a373<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-06 16:42:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-06 16:42:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 52 58 55 4d 66 5a 56 57 6b 75 6f 6b 42 6c 37 76 72 42 79 37 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: CRXUMfZVWkuokBl7vrBy7Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:10 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164210Z-1657d5bbd48xdq5dkwwugdpzr000000002k000000000c1z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:11 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:10 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164211Z-1657d5bbd48xsz2nuzq4vfrzg800000002700000000005fz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:10 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164211Z-1657d5bbd48gqrfwecymhhbfm8000000014g00000000481p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:11 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164211Z-1657d5bbd48vhs7r2p1ky7cs5w00000002k000000000b0f6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:11 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:11 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164211Z-1657d5bbd482tlqpvyz9e93p54000000026g00000000s24x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:11 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:11 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164211Z-1657d5bbd48xdq5dkwwugdpzr000000002eg00000000qnqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:11 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164211Z-1657d5bbd48cpbzgkvtewk0wu0000000029000000000gs58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:11 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:12 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164212Z-1657d5bbd48sqtlf1huhzuwq7000000001z000000000ef0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:12 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:12 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: d112c6a6-a01e-000d-2160-17d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164212Z-1657d5bbd48dfrdj7px744zp8s00000001y000000000kf3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:12 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:12 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:12 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164212Z-1657d5bbd48t66tjar5xuq22r8000000023000000000tk8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:12 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:12 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:12 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164212Z-1657d5bbd48dfrdj7px744zp8s000000021g000000006m7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:12 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:12 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164212Z-1657d5bbd48t66tjar5xuq22r8000000029g000000003ex1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:12 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164212Z-1657d5bbd48vlsxxpe15ac3q7n000000027g000000009m9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:13 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164213Z-1657d5bbd48q6t9vvmrkd293mg000000029g000000004aqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:13 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:13 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164213Z-1657d5bbd48qjg85buwfdynm5w000000028000000000nrt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:13 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:13 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164213Z-1657d5bbd482lxwq1dp2t1zwkc00000002300000000013fv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:13 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164213Z-1657d5bbd4824mj9d6vp65b6n400000002g0000000006480 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:13 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7c825ef0-601e-0001-5f02-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164213Z-1657d5bbd48p2j6x2quer0q02800000002e000000000bvay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:13 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164213Z-1657d5bbd48f7nlxc7n5fnfzh000000001v000000000gvn1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:14 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:14 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164214Z-1657d5bbd48tqvfc1ysmtbdrg0000000021000000000nhn4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:14 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:14 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:14 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164214Z-1657d5bbd48jwrqbupe3ktsx9w00000002b000000000skt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:14 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:14 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164214Z-1657d5bbd4824mj9d6vp65b6n400000002fg000000007v25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:14 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164214Z-1657d5bbd48f7nlxc7n5fnfzh000000001z0000000002kkp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:14 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:14 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 53f69819-801e-0048-7802-17f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164214Z-1657d5bbd4824mj9d6vp65b6n400000002hg0000000010pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:14 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:14 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164214Z-1657d5bbd48cpbzgkvtewk0wu0000000027g00000000qk7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:14 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:14 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164214Z-1657d5bbd48q6t9vvmrkd293mg000000027g00000000axhw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:15 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:15 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:15 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164215Z-1657d5bbd482lxwq1dp2t1zwkc00000001vg00000000ugur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:15 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:15 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:15 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164215Z-1657d5bbd48cpbzgkvtewk0wu000000002b000000000ap26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:15 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:15 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:15 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164215Z-1657d5bbd48sqtlf1huhzuwq7000000001yg00000000es7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:15 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:15 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:15 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164215Z-1657d5bbd48gqrfwecymhhbfm8000000014g00000000487k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:15 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:15 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164215Z-1657d5bbd482lxwq1dp2t1zwkc00000001w000000000t9kg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:15 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164215Z-1657d5bbd48xlwdx82gahegw4000000002f000000000a4ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:16 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164216Z-1657d5bbd487nf59mzf5b3gk8n00000001y00000000057ms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:16 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164216Z-1657d5bbd48qjg85buwfdynm5w000000028000000000nrwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:16 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164216Z-1657d5bbd48lknvp09v995n79000000001zg000000000cum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:16 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164216Z-1657d5bbd48f7nlxc7n5fnfzh000000001vg00000000euq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:16 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164216Z-1657d5bbd48762wn1qw4s5sd30000000023000000000eb67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:16 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164216Z-1657d5bbd48dfrdj7px744zp8s00000001w000000000qzvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:16 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 938e68e0-901e-0029-0160-17274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164216Z-1657d5bbd48gqrfwecymhhbfm80000000140000000005wtf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:17 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:17 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164217Z-1657d5bbd48brl8we3nu8cxwgn00000002fg00000000nc1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:17 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:17 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164217Z-1657d5bbd48sqtlf1huhzuwq7000000001v000000000u5tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:17 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:17 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164217Z-1657d5bbd48gqrfwecymhhbfm80000000140000000005wu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:17 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:17 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:17 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164217Z-1657d5bbd48vlsxxpe15ac3q7n000000024000000000n9sn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:17 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:17 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:17 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164217Z-1657d5bbd48dfrdj7px744zp8s00000001y000000000kfbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164218Z-1657d5bbd482lxwq1dp2t1zwkc00000001vg00000000uh2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:18 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:18 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164218Z-1657d5bbd48sqtlf1huhzuwq7000000001wg00000000pmyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:18 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164218Z-1657d5bbd48xsz2nuzq4vfrzg8000000021g00000000k627 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:18 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:18 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164218Z-1657d5bbd48dfrdj7px744zp8s000000021g000000006mk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:18 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164218Z-1657d5bbd48sqtlf1huhzuwq7000000001xg00000000hr83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:19 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:19 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: bfab55ab-401e-0015-6202-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164219Z-1657d5bbd48cpbzgkvtewk0wu000000002cg000000005gvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:19 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:19 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164219Z-1657d5bbd48762wn1qw4s5sd30000000023000000000ebd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:19 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164219Z-1657d5bbd482krtfgrg72dfbtn00000001x000000000m1v1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:20 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164220Z-1657d5bbd48vhs7r2p1ky7cs5w00000002ng000000002tyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:20 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164220Z-1657d5bbd48tnj6wmberkg2xy800000002cg000000005grv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:20 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:20 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164220Z-1657d5bbd48tnj6wmberkg2xy800000002a000000000deyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:20 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:20 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f196d52c-b01e-0002-1604-171b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164220Z-1657d5bbd48brl8we3nu8cxwgn00000002eg00000000qy9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:20 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164220Z-1657d5bbd48t66tjar5xuq22r8000000024g00000000mh1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:20 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:21 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164221Z-1657d5bbd48xlwdx82gahegw4000000002eg00000000bfnw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:21 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:21 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164221Z-1657d5bbd4824mj9d6vp65b6n400000002h00000000033mq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:21 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:21 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164221Z-1657d5bbd48tqvfc1ysmtbdrg0000000026g000000001nd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:21 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:21 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:21 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164221Z-1657d5bbd48lknvp09v995n79000000001yg0000000040p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:21 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:21 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:21 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164221Z-1657d5bbd48q6t9vvmrkd293mg00000002ag000000000cta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:21 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:21 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:21 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164221Z-1657d5bbd48xdq5dkwwugdpzr000000002n0000000004ram x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:21 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:21 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:21 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164221Z-1657d5bbd48xdq5dkwwugdpzr000000002g000000000mhzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:21 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:21 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:21 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164221Z-1657d5bbd482lxwq1dp2t1zwkc00000001x000000000p92s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:21 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:21 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164222Z-1657d5bbd48f7nlxc7n5fnfzh000000001v000000000gvze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:22 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:21 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164222Z-1657d5bbd4824mj9d6vp65b6n400000002g000000000652y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:22 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164222Z-1657d5bbd48jwrqbupe3ktsx9w00000002fg0000000082qs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:22 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164222Z-1657d5bbd482lxwq1dp2t1zwkc000000021g000000006pg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:22 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164222Z-1657d5bbd48vhs7r2p1ky7cs5w00000002g000000000hnt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:22 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164222Z-1657d5bbd48f7nlxc7n5fnfzh000000001xg0000000080q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:22 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:22 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164222Z-1657d5bbd48lknvp09v995n79000000001vg00000000f8b9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:22 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:23 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:23 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164223Z-1657d5bbd48sqtlf1huhzuwq70000000022g0000000018et x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:23 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:23 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:23 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 03c3f781-101e-000b-56fe-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164223Z-1657d5bbd48brl8we3nu8cxwgn00000002ng000000002y0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:23 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:23 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:23 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164223Z-1657d5bbd48vhs7r2p1ky7cs5w00000002m0000000008b60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:23 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:23 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:23 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164223Z-1657d5bbd4824mj9d6vp65b6n400000002a000000000tcf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:23 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:23 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:23 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: c7b66cba-b01e-005c-04ff-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164223Z-1657d5bbd48vlsxxpe15ac3q7n000000023g00000000q9cr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:23 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:24 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:24 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164224Z-1657d5bbd487nf59mzf5b3gk8n00000001t000000000n48b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:24 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:24 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:24 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164224Z-1657d5bbd48wd55zet5pcra0cg000000027g000000009uwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:24 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:24 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:24 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164224Z-1657d5bbd4824mj9d6vp65b6n400000002ag00000000t3vd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:24 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:24 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:24 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164224Z-1657d5bbd48xlwdx82gahegw4000000002e000000000czyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:24 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:24 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164224Z-1657d5bbd48vlsxxpe15ac3q7n000000023g00000000q9e0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:24 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164224Z-1657d5bbd48jwrqbupe3ktsx9w00000002fg0000000082u0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:24 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164224Z-1657d5bbd48q6t9vvmrkd293mg000000026000000000fmng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:24 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:24 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fcca05a5-501e-00a0-3202-179d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164224Z-1657d5bbd48cpbzgkvtewk0wu0000000029g00000000f17d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:24 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:24 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:25 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fbb49b00-e01e-00aa-4806-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164225Z-1657d5bbd48wd55zet5pcra0cg000000027000000000bmc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:25 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:42:24 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:42:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:42:24 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164224Z-1657d5bbd48dfrdj7px744zp8s000000020000000000axtg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:42:25 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2264, Parent PID: 6092

General

Target ID:	0
Start time:	12:41:54
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4256, Parent PID: 2264

General

Target ID:	2
Start time:	12:41:59
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2004,i,5905226797290870314,14621505294842415606,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1408, Parent PID: 6092

General

Target ID:	3
Start time:	12:42:01
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-ehzzfw.xyz/update/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://us-usps-ehzzfw.xyz/update/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2264, Parent PID: 6092

General

Chronological Activities

Analysis Process: chrome.exePID: 4256, Parent PID: 2264

General

Chronological Activities

Analysis Process: chrome.exePID: 1408, Parent PID: 6092

General

Chronological Activities

Disassembly

Windows Analysis Report
https://us-usps-ehzzfw.xyz/update/