Edit tour

Windows Analysis Report
https://us-usps-mntmkm.xyz/update/

Overview

General Information

Sample URL:	https://us-usps-mntmkm.xyz/update/
Analysis ID:	1526976
Tags:	openphish
Infos:

Errors URL not reachable

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Performs DNS queries to domains with low reputation

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2200,i,13842176120624317952,14536439779817096252,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 884 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-mntmkm.xyz/update/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://us-usps-mntmkm.xyz/update/

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social usering

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49800 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-mntmkm.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-mntmkm.xyz
Source:	DNS query: us-usps-mntmkm.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-mntmkm.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-mntmkm.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-mntmkm.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-mntmkm.xyz
Source:	DNS query: us-usps-mntmkm.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-mntmkm.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-mntmkm.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: us-usps-mntmkm.xyz
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49800 version: TLS 1.2

Source: classification engine

Classification label: mal52.troj.win@19/0@14/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2200,i,13842176120624317952,14536439779817096252,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-mntmkm.xyz/update/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2200,i,13842176120624317952,14536439779817096252,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://us-usps-mntmkm.xyz/update/	100%	SlashNext	Fraudulent Website type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
google.com	142.250.184.206	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
us-usps-mntmkm.xyz	unknown	unknown	true	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526976
Start date and time:	2024-10-06 18:45:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 1m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us-usps-mntmkm.xyz/update/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.troj.win@19/0@14/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	URL browsing timeout or error

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 216.58.206.46, 64.233.166.84, 34.104.35.123, 184.28.90.27, 4.175.87.197, 192.229.221.95, 52.165.164.15, 199.232.214.172
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://us-usps-mntmkm.xyz/update/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 18:45:55.782743931 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:45:55.970172882 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:45:56.079572916 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:46:02.920895100 CEST	49714	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:02.920924902 CEST	443	49714	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:02.920991898 CEST	49714	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:02.922068119 CEST	49714	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:02.922095060 CEST	443	49714	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:03.722748995 CEST	443	49714	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:03.722845078 CEST	49714	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:03.735958099 CEST	49714	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:03.736043930 CEST	443	49714	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:03.737015009 CEST	443	49714	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:03.746365070 CEST	49714	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:03.746449947 CEST	49714	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:03.746464014 CEST	443	49714	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:03.746823072 CEST	49714	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:03.791416883 CEST	443	49714	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:03.922861099 CEST	443	49714	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:03.923044920 CEST	443	49714	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:03.923115969 CEST	49714	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:03.923491001 CEST	49714	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:03.923535109 CEST	443	49714	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:05.261281013 CEST	49718	443	192.168.2.6	142.250.184.196
Oct 6, 2024 18:46:05.261348009 CEST	443	49718	142.250.184.196	192.168.2.6
Oct 6, 2024 18:46:05.261426926 CEST	49718	443	192.168.2.6	142.250.184.196
Oct 6, 2024 18:46:05.261631966 CEST	49718	443	192.168.2.6	142.250.184.196
Oct 6, 2024 18:46:05.261651039 CEST	443	49718	142.250.184.196	192.168.2.6
Oct 6, 2024 18:46:05.392692089 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:46:05.577622890 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:46:05.687009096 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:46:05.830615997 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:05.830656052 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:05.830722094 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:05.830954075 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:05.830965996 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:05.907591105 CEST	443	49718	142.250.184.196	192.168.2.6
Oct 6, 2024 18:46:05.907917976 CEST	49718	443	192.168.2.6	142.250.184.196
Oct 6, 2024 18:46:05.907954931 CEST	443	49718	142.250.184.196	192.168.2.6
Oct 6, 2024 18:46:05.909166098 CEST	443	49718	142.250.184.196	192.168.2.6
Oct 6, 2024 18:46:05.909368992 CEST	49718	443	192.168.2.6	142.250.184.196
Oct 6, 2024 18:46:05.915234089 CEST	49718	443	192.168.2.6	142.250.184.196
Oct 6, 2024 18:46:05.915303946 CEST	443	49718	142.250.184.196	192.168.2.6
Oct 6, 2024 18:46:05.968278885 CEST	49718	443	192.168.2.6	142.250.184.196
Oct 6, 2024 18:46:05.968323946 CEST	443	49718	142.250.184.196	192.168.2.6
Oct 6, 2024 18:46:06.015142918 CEST	49718	443	192.168.2.6	142.250.184.196
Oct 6, 2024 18:46:06.476959944 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.477044106 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.509919882 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.509951115 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.510425091 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.539511919 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.583416939 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.637481928 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.637598991 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.637643099 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.637670040 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.637691021 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.637738943 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.722671986 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.722706079 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.722745895 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.722764015 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.722820997 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.724891901 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.724935055 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.724963903 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.724977016 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.725009918 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.725045919 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.810084105 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.810148001 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.810256004 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.810277939 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.810314894 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.810331106 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.810672998 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.810719967 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.810755968 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.810762882 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.810792923 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.810815096 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.810985088 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.811032057 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.811074018 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.811080933 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.811115980 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.811136961 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.811981916 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.812024117 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.812060118 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.812068939 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.812102079 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.812123060 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.896586895 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.896641016 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.896677971 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.896697044 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.896752119 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.896776915 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.897542000 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.897587061 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.897618055 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.897624969 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.897680998 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.898144007 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.898195028 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.898233891 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.898241043 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.898278952 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.898288012 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.898624897 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.898668051 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.898689985 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.898695946 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.898734093 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.899882078 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.899971962 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.900010109 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.900016069 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.900065899 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.900350094 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.900405884 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.900424004 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.900429964 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.900468111 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.900489092 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.900772095 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.900832891 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.900840998 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.900886059 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.900927067 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.900979996 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.901087999 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.901108027 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:06.901119947 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:06.901127100 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.046220064 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.046328068 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.046416998 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.048048973 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.048069000 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.048151016 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.048573971 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.048604965 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.048655987 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.048743963 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.048780918 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.048810005 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.048824072 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.049468040 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.049494028 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.049561024 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.049567938 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.049593925 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.051261902 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.051362991 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.051439047 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.051649094 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.051683903 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.051731110 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.051743031 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.317387104 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 6, 2024 18:46:07.317523003 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:46:07.684380054 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.684779882 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.684802055 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.685180902 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.685187101 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.687479973 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.689527988 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.694176912 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.694258928 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.694582939 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.694597960 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.695842028 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.695857048 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.696315050 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.696324110 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.720803022 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.725809097 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.725835085 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.726422071 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.726427078 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.726788998 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.728041887 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.728125095 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.728763103 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.728777885 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.787369013 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.787406921 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.787478924 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.787489891 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.787564993 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.787616968 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.790672064 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.790744066 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.791013956 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.791449070 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.791466951 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.792056084 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.792081118 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.792155027 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.792192936 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.792249918 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.792264938 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.792292118 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.792346001 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.793797970 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.793797970 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.793833971 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.793858051 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.806611061 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.806626081 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.806657076 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.806669950 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.825189114 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.825247049 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.825310946 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.825337887 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.825385094 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.825541019 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.825638056 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.825684071 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.831269026 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.831331015 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.831422091 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.873228073 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.873284101 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.873312950 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.873330116 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.879751921 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.879791021 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.879865885 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.880481958 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.880491972 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.880506039 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.880510092 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.908344984 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.908360004 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.948313951 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.948354006 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.948493004 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.952022076 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.952121973 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.952249050 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.952450991 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.952471972 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.952567101 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.952655077 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.952672005 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.953385115 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.953396082 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.953493118 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.954094887 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.954104900 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.960362911 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.960403919 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:07.974720001 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:07.974741936 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.554802895 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.571983099 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.572016001 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.572599888 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.572607994 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.604052067 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.604850054 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.604883909 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.605874062 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.605887890 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.606442928 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.606985092 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.607002974 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.608280897 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.608288050 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.621757030 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.622170925 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.622220993 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.622730017 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.622739077 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.654526949 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.654963017 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.654988050 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.655514956 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.655522108 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.670782089 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.670856953 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.671045065 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.671593904 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.671612024 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.671631098 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.671636105 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.677242041 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.677288055 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.677462101 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.677906036 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.677922010 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.705352068 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.705435038 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.705569983 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.705813885 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.705881119 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.705962896 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.706121922 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.706121922 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.706145048 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.706157923 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.707813978 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.707843065 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.710660934 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.710690975 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.710711956 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.710738897 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.710815907 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.712256908 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.712285042 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.712438107 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.712754011 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.712779999 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.713121891 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.713129997 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.724781990 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.724858046 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.724977016 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.725251913 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.725270987 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.725287914 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.725295067 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.728312969 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.728346109 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.728604078 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.728780985 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.728791952 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.760610104 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.760679007 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.760991096 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.761264086 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.761277914 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.761291027 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.761296034 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.764307022 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.764344931 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:08.764512062 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.764754057 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:08.764763117 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.337810040 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.338310003 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.338347912 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.338864088 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.338871956 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.348728895 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.349255085 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.349280119 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.350347042 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.350367069 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.373703003 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.374275923 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.374285936 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.375400066 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.375405073 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.377660036 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.378179073 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.378205061 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.378842115 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.378846884 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.403846025 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.404639959 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.404664993 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.405225992 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.405232906 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.440340042 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.440433025 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.440560102 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.441135883 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.441160917 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.448024988 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.448103905 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.448168039 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.448704958 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.448744059 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.448803902 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.449512005 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.449538946 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.449554920 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.449561119 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.455874920 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.455924988 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.456043959 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.456840992 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.456854105 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.457155943 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.457176924 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.476681948 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.476763010 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.477442980 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.479810953 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.479885101 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.479938984 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.503232002 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.503302097 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.503360987 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.522753954 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.522783995 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.522816896 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.522823095 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.587518930 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.587615013 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.587677956 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.587698936 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.590150118 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.590209007 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.590225935 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.590234041 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.642961979 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.643068075 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.643357992 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.645453930 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.645514965 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.645581007 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.647644043 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.647676945 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.647752047 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.648134947 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.648201942 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.648353100 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.648369074 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:09.648794889 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:09.648809910 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.116765976 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.117387056 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.117466927 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.118669987 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.118684053 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.124860048 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.125585079 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.125648022 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.129239082 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.129254103 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.215012074 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.215091944 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.215435028 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.215715885 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.215740919 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.215755939 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.215764046 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.219695091 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.219765902 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.220067978 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.220532894 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.220550060 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.228121042 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.228198051 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.228517056 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.228610992 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.228635073 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.228652954 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.228658915 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.232831001 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.232873917 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.233052015 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.233980894 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.234000921 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.298018932 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.301707029 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.304666042 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.319179058 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.319282055 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.319987059 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.320004940 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.321284056 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.321365118 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.322587967 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.322602987 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.323168993 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.323193073 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.324387074 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.324397087 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.415246964 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.415424109 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.415514946 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.417830944 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.417977095 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.418045044 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.419820070 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.419887066 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.419929028 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.419949055 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.421418905 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.421473026 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.421669006 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.421731949 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.421814919 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.421814919 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.421849966 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.424770117 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.424784899 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.432081938 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.432128906 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.432425022 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.434439898 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.434449911 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.434597015 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.436791897 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.436866045 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.437216997 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.437227011 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.437266111 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.437525988 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.437541962 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.437918901 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.437927008 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.859179974 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.860172987 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.860229015 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.860735893 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.860743046 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.869976997 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.870407104 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.870454073 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.870920897 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.870929003 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.958668947 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.958750963 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.958971024 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.959220886 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.959254980 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.959273100 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.959280014 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.963205099 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.963329077 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.963711023 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.964013100 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.964045048 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.968440056 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.968514919 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.968576908 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.969264984 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.969285011 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.972580910 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.972618103 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:10.972858906 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.972858906 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:10.972887039 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.071625948 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.072705030 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.072736025 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.074086905 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.074093103 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.078002930 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.079145908 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.079195023 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.080467939 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.080475092 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.083091974 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.084389925 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.084399939 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.086612940 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.086616993 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.171395063 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.171468019 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.171542883 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.171808004 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.171829939 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.175699949 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.175734043 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.175791979 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.176017046 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.176024914 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.183211088 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.183367014 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.183439970 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.183727980 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.183793068 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.183846951 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.183880091 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.183912039 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.183929920 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.183938026 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.184299946 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.184318066 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.184386015 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.184391975 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.190839052 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.190963030 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.191037893 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.191349030 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.191401005 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.194937944 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.195003986 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.195244074 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.195626974 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.195652962 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.378693104 CEST	49753	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:11.378741026 CEST	443	49753	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:11.378813982 CEST	49753	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:11.379616976 CEST	49753	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:11.379626036 CEST	443	49753	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:11.602674961 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.603981972 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.604079962 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.605418921 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.605451107 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.607072115 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.607628107 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.607640028 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.608784914 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.608788967 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.700891972 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.700973034 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.701031923 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.713943005 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.714014053 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.714061022 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.777378082 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.777419090 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.777436972 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.777446032 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.782474041 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.782489061 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.782501936 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.782506943 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.787664890 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.787736893 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.787801027 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.791098118 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.791138887 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.791196108 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.791795015 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.791814089 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.792072058 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.792081118 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.806288004 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.806783915 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.806796074 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.807554007 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.807557106 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.843251944 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.844557047 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.844567060 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.846033096 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.846036911 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.868685961 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.869380951 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.869406939 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.870827913 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.870834112 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.904757023 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.904818058 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.904859066 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.905347109 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.905356884 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.905368090 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.905371904 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.912194014 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.912225962 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.912281036 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.912446976 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.912457943 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.944665909 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.944721937 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.944761992 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.945095062 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.945102930 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.945120096 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.945123911 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.951236010 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.951287031 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.951338053 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.951644897 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.951663017 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.972843885 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.972899914 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.972948074 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.997366905 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.997383118 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:11.997400045 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:11.997406006 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.004894972 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.004905939 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.004964113 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.005395889 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.005408049 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.181197882 CEST	443	49753	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:12.181283951 CEST	49753	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:12.187705040 CEST	49753	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:12.187724113 CEST	443	49753	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:12.188026905 CEST	443	49753	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:12.192554951 CEST	49753	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:12.192636013 CEST	49753	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:12.192645073 CEST	443	49753	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:12.193042994 CEST	49753	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:12.239404917 CEST	443	49753	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:12.366043091 CEST	443	49753	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:12.366178989 CEST	443	49753	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:12.366242886 CEST	49753	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:12.366466045 CEST	49753	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:12.366482019 CEST	443	49753	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:12.430668116 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.431494951 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.431539059 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.432076931 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.432084084 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.436328888 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.437037945 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.437119007 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.438316107 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.438332081 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.529428005 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.529596090 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.529752970 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.536365986 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.536447048 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.536566019 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.551223993 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.582273960 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.582274914 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.582349062 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.582379103 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.583446980 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.583491087 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.584497929 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.584532022 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.584992886 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.584999084 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.587317944 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.587344885 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.587621927 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.588208914 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.588217020 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.588274002 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.588418961 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.588429928 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.588500023 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.588509083 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.612914085 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.613533974 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.613585949 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.614037991 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.614043951 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.671493053 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.672765970 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.672821045 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.673415899 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.673424006 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.680116892 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.680263042 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.680332899 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.680596113 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.680629015 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.686229944 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.686288118 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.686783075 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.693995953 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.694020987 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.716255903 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.716391087 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.716465950 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.716914892 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.716937065 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.716953039 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.716959953 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.722065926 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.722096920 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.722162962 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.722645044 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.722661018 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.774166107 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.774235010 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.774300098 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.774533033 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.774554968 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.774571896 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.774580956 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.777887106 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.777935028 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:12.778217077 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.778502941 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:12.778525114 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.238120079 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.238594055 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.238615990 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.238990068 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.238993883 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.267091036 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.267486095 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.267513037 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.267982006 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.267987013 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.329879999 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.330620050 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.330651045 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.331038952 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.331043959 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.339056969 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.339132071 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.339190006 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.339396954 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.339411974 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.339421988 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.339427948 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.341842890 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.341880083 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.342021942 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.342204094 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.342212915 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.372730970 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.372795105 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.372957945 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.373100996 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.373120070 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.373131990 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.373137951 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.376635075 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.376681089 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.376950026 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.377157927 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.377171040 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.391741991 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.392293930 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.392313957 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.392688036 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.392692089 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.419028044 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.419493914 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.419517994 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.419878960 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.419884920 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.429006100 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.429091930 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.429153919 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.429347992 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.429368019 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.429377079 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.429382086 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.432221889 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.432317972 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.432414055 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.432538033 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.432560921 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.495424032 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.495491982 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.495579004 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.495717049 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.495740891 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.495753050 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.495759010 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.498408079 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.498451948 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.498606920 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.498779058 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.498791933 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.519798994 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.519860983 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.520036936 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.520108938 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.520148039 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.520173073 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.520188093 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.522731066 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.522803068 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:13.522871971 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.523036957 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:13.523060083 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.004717112 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.005192995 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.005218029 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.005713940 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.005718946 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.013982058 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.014365911 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.014431953 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.014821053 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.014837027 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.067543983 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.068038940 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.068106890 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.068523884 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.068537951 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.107007027 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.107098103 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.107197046 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.107359886 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.107377052 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.107407093 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.107414961 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.110955000 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.110986948 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.111068964 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.111247063 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.111255884 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.114083052 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.114144087 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.114195108 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.114303112 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.114329100 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.114343882 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.114351034 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.117105961 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.117117882 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.117183924 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.117391109 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.117398024 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.147042990 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.147541046 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.147556067 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.148060083 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.148063898 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.166713953 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.166785955 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.166871071 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.167011976 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.167027950 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.167038918 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.167045116 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.169766903 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.169811964 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.169883013 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.170017004 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.170031071 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.197411060 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.197864056 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.197877884 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.198337078 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.198343039 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.248385906 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.248446941 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.248588085 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.248686075 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.248704910 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.248716116 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.248724937 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.251377106 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.251458883 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.251591921 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.251749039 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.251765966 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.303587914 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.303663015 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.303837061 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.303873062 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.303894043 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.303908110 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.303915024 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.306540012 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.306586027 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.306663036 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.306864023 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.306876898 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.819406033 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.819874048 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.819890022 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.820306063 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.820310116 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.825666904 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.826041937 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.826059103 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.826431990 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.826436996 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.847065926 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.847476959 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.847527027 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.847877026 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.847883940 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.922692060 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.922770977 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.922863960 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.923008919 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.923032045 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.923044920 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.923052073 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.925621033 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.925662041 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.925853968 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.926035881 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.926048040 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.929172993 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.929243088 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.929286003 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.929385900 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.929399014 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.929410934 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.929415941 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.931560993 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.931632996 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.931704998 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.931829929 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.931848049 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.937908888 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.938282013 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.938298941 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.938761950 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.938769102 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.949881077 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.949963093 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.950023890 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.950185061 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.950217962 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.950237989 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.950246096 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.952471972 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.952514887 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.952733040 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.952869892 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.952881098 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.974895954 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.975275993 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.975302935 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:14.975725889 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:14.975730896 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.042226076 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.042284012 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.042341948 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.042598009 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.042620897 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.042638063 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.042645931 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.045383930 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.045428991 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.045490026 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.045670033 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.045679092 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.075720072 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.075887918 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.076128960 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.076160908 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.076178074 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.076188087 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.076194048 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.079248905 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.079262972 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.079442978 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.079647064 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.079654932 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.565799952 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.566490889 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.566515923 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.568928957 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.568936110 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.570776939 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.571322918 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.571377039 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.571805000 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.571811914 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.592287064 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.593154907 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.593185902 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.593286037 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.593290091 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.668417931 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.668495893 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.668847084 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.668847084 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.669549942 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.669570923 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.671310902 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.671370029 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.671570063 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.671570063 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.671606064 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.688776970 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.688852072 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.689059973 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.689059973 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.689502001 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.689522028 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.691859007 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.691895008 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.692106009 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.692106009 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.692131996 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.716206074 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.717067003 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.717067003 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.717083931 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.717098951 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.723818064 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.723932981 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.724077940 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.724077940 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.726526976 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.726533890 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.726541042 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.726574898 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.726716995 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.726787090 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.726795912 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.729507923 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.729867935 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.729882956 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.730300903 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.730304956 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.803260088 CEST	443	49718	142.250.184.196	192.168.2.6
Oct 6, 2024 18:46:15.803436995 CEST	443	49718	142.250.184.196	192.168.2.6
Oct 6, 2024 18:46:15.803725958 CEST	49718	443	192.168.2.6	142.250.184.196
Oct 6, 2024 18:46:15.816274881 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.816354036 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.816625118 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.816626072 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.816994905 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.817017078 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.819614887 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.819664001 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.819900036 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.819900036 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.819932938 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.830349922 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.830415964 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.830495119 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.830802917 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.830802917 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.830817938 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.830826044 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.833873034 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.833920002 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:15.834028959 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.834347963 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:15.834361076 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.322129965 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.322825909 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.322865009 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.323805094 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.323818922 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.331845999 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.332293987 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.332324982 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.332974911 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.332979918 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.378137112 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.378845930 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.378874063 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.380094051 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.380109072 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.425108910 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.425174952 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.425236940 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.426764011 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.426795959 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.426811934 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.426820040 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.431296110 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.431371927 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.431410074 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.434762001 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.434776068 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.434786081 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.434789896 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.438828945 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.438878059 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.438939095 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.440095901 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.440113068 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.441821098 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.441839933 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.441911936 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.442111015 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.442122936 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.480541945 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.481460094 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.481539965 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.481580973 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.481609106 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.481633902 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.482692003 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.482700109 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.483206987 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.483231068 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.496182919 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.497514009 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.497535944 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.498539925 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.498543024 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.503488064 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.503582001 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.503688097 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.504053116 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.504086018 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.579924107 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.580071926 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.580127001 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.582603931 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.582629919 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.582643986 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.582648993 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.586142063 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.586180925 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.586319923 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.586600065 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.586612940 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.621774912 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.621844053 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.621885061 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.622278929 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.622298956 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.622311115 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.622317076 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.625821114 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.625873089 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:16.625947952 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.626140118 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:16.626157999 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.051670074 CEST	49718	443	192.168.2.6	142.250.184.196
Oct 6, 2024 18:46:17.051743031 CEST	443	49718	142.250.184.196	192.168.2.6
Oct 6, 2024 18:46:17.077367067 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.077960014 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.077996969 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.078810930 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.078828096 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.113533020 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.114178896 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.114223003 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.114762068 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.114775896 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.140206099 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.154612064 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.154659033 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.156189919 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.156210899 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.176544905 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.176625013 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.176672935 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.177555084 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.177576065 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.177592039 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.177599907 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.186098099 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.186141968 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.186192989 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.186708927 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.186721087 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.218240976 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.218796015 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.218811989 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.219424009 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.219434023 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.230051041 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.230123997 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.230168104 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.230351925 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.230370998 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.230386972 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.230393887 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.234245062 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.234292030 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.234344959 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.234761000 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.234771013 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.252515078 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.252599955 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.252661943 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.252789021 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.252836943 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.252866983 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.252883911 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.258061886 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.258117914 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.258186102 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.258389950 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.258405924 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.260130882 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.260505915 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.260543108 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.261141062 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.261147976 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.319205046 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.319289923 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.319338083 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.321331978 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.321362972 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.321408033 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.321417093 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.327106953 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.327142954 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.327197075 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.327507973 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.327522039 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.358922005 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.358994007 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.359117985 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.362567902 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.362567902 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.362595081 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.362608910 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.365680933 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.365724087 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.365808964 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.366220951 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.366235018 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.847143888 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.848001003 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.848017931 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.849443913 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.849452019 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.868762016 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.870237112 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.870265961 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.871814013 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.871828079 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.933558941 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.934088945 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.934127092 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.935080051 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.935087919 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.949927092 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.949990988 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.950047970 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.950673103 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.950694084 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.950707912 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.950716019 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.955591917 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.955629110 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.955868959 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.956830978 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.956840038 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.968893051 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.969016075 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.969109058 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.969347954 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.969367027 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.975406885 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.976001024 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.976012945 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.977143049 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.977149010 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.983227968 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.983278036 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:17.983623028 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.983931065 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:17.983944893 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.015798092 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.017452002 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.017477036 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.018191099 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.018202066 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.038898945 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.038975954 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.039026022 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.039755106 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.039771080 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.039796114 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.039802074 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.043740034 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.043778896 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.043837070 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.044029951 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.044038057 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.076246977 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.076329947 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.076387882 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.076896906 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.076903105 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.083669901 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.083703995 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.083837986 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.084187031 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.084201097 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.116770029 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.116935015 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.117016077 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.117482901 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.117530107 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.117561102 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.117578030 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.121805906 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.121843100 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.122037888 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.122200012 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.122215986 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.632316113 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.632776022 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.632801056 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.634402037 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.634407043 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.646316051 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.646723032 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.646769047 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.647142887 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.647149086 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.715523958 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.715950966 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.716001034 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.717478037 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.717485905 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.734684944 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.735049009 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.735110044 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.735435009 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.735449076 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.736980915 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.737059116 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.737122059 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.737219095 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.737253904 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.737278938 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.737293005 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.739765882 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.739809990 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.739886045 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.740072966 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.740097046 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.749543905 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.749728918 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.749849081 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.749850035 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.749850035 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.752058983 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.752151966 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.752232075 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.752361059 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.752394915 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.765933990 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.766768932 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.766768932 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.766782045 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.766807079 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.814389944 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.814543962 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.814639091 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.814771891 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.814771891 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.814825058 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.814852953 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.817533016 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.817636013 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.817739010 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.817913055 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.817949057 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.841742039 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.841913939 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.841981888 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.842061996 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.842061996 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.842108011 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.842138052 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.844361067 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.844407082 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.844558001 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.844697952 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.844708920 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.866307020 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.866375923 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.866581917 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.866581917 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.866713047 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.866733074 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.868916988 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.868948936 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:18.869016886 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.869153023 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:18.869160891 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.062855005 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.062931061 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.430695057 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.435374975 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.445576906 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.445642948 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.449944973 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.450073957 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.450092077 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.451116085 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.451149940 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.451837063 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.451850891 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.452982903 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.453000069 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.454886913 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.454893112 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.457997084 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.458909988 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.458966017 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.460000992 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.460021973 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.554644108 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.556849003 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.556879044 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.556912899 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.556969881 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.557001114 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.557024002 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.557070017 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.557514906 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.557626963 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.557626963 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.557634115 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.557678938 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.557688951 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.557718039 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.558092117 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.558106899 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.566251040 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.566325903 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.566395044 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.566922903 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.566956043 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.567682028 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.567833900 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.567889929 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.568232059 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.568248987 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.568262100 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.568268061 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.568393946 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.568424940 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.568459034 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.568485022 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.568505049 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.568553925 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.570409060 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.570425987 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.571197033 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.571345091 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.571423054 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.571789980 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.571790934 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.571815968 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.571836948 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.578619003 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.578655005 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.578711987 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.580149889 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.580239058 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.580302000 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.582510948 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.582546949 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.582608938 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.582992077 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.583026886 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.583848000 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.583863020 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.584069014 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.584094048 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.659970999 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.660023928 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.660083055 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.660123110 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.660155058 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.660224915 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.660521984 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.660547972 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.665874958 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.665918112 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:19.665997982 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.666516066 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:19.666544914 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.210980892 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.211441040 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.211473942 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.211915016 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.211924076 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.232836008 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.233225107 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.233298063 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.233591080 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.233604908 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.234685898 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.235099077 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.235177040 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.235455036 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.235470057 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.236793041 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.237065077 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.237092972 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.237387896 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.237397909 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.307121038 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.307503939 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.307586908 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.307862997 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.307877064 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.315994024 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.316051006 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.316235065 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.316245079 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.316345930 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.316345930 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.316468954 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.316493034 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.318809986 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.318865061 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.319060087 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.319139004 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.319147110 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.332120895 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.332326889 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.332334042 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.332433939 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.332433939 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.332499981 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.332536936 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.332668066 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.334341049 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.334404945 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.334405899 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.334433079 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.334465027 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.334481001 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.334518909 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.334750891 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.334781885 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.336293936 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.336319923 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.336389065 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.336500883 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.336519003 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.337268114 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.337346077 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.337476969 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.337476969 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.337534904 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.337548971 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.339282990 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.339328051 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.339482069 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.339607000 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.339627981 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.405659914 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.405829906 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.405927896 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.405927896 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.406754017 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.406779051 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.407891989 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.407933950 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.407994032 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.408102036 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.408109903 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.969242096 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.978948116 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.978979111 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.979445934 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.979453087 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.984863997 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.985745907 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.985745907 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:20.985806942 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:20.985851049 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.002444983 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.003046036 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.003066063 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.003572941 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.003580093 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.012837887 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.013540983 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.013540983 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.013566017 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.013586044 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.049165010 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.056586981 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.056611061 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.057761908 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.057773113 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.076452971 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.076636076 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.076865911 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.076981068 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.076981068 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.077001095 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.077011108 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.081785917 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.081888914 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.085736036 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.085918903 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.085962057 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.086127043 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.086236000 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.086236000 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.086282969 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.086330891 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.087748051 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.087802887 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.090739012 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.090763092 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.093971968 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.093971968 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.094027996 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.105564117 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.105652094 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.105864048 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.106158972 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.106168032 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.106203079 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.106209040 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.108984947 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.109029055 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.111792088 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.112045050 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.112062931 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.116216898 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.116398096 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.116662979 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.116816044 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.116816998 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.116838932 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.116866112 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.119044065 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.119071007 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.119251966 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.119251966 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.119277954 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.153198004 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.153372049 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.153866053 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.153867006 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.154203892 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.154244900 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.156147003 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.156258106 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.156986952 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.157403946 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.157449961 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.740678072 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.741302967 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.741365910 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.741719007 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.741750002 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.747724056 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.748133898 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.748162985 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.748572111 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.748580933 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.777049065 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.777489901 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.777553082 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.777877092 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.777890921 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.813460112 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.813780069 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.813793898 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.814131975 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.814136982 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.833815098 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.834145069 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.834167004 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.834572077 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.834575891 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.839884043 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.839992046 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.840042114 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.840127945 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.840151072 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.840164900 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.840173006 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.842854023 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.842879057 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.842943907 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.843096972 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.843106985 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.848347902 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.848417997 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.848460913 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.848472118 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.848529100 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.848548889 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.848560095 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.848575115 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.848575115 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.848581076 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.848589897 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.850613117 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.850641012 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.850699902 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.850810051 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.850821018 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.878308058 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.878547907 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.878602028 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.878654957 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.878673077 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.878684998 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.878690958 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.880866051 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.880878925 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.880934000 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.881093025 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.881098986 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.917907953 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.918083906 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.918129921 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.918140888 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.918154955 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.918204069 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.918225050 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.918241024 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.918248892 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.921113968 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.921152115 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.921220064 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.921402931 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.921415091 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.938889027 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.939038038 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.939080000 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.939157963 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.939165115 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.939177036 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.939182043 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.941824913 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.941833973 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:21.941890955 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.942051888 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:21.942060947 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.480685949 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.481290102 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.481314898 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.481740952 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.481745005 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.503230095 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.503756046 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.503772974 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.504355907 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.504360914 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.513319969 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.513670921 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.513679028 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.514132023 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.514136076 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.583852053 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.584872961 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.584872961 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.584913015 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.584952116 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.590276957 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.590750933 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.590781927 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.591023922 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.591032982 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.621722937 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.622585058 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.622699022 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.622699022 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.622776985 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.622803926 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.625008106 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.625046015 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.625204086 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.625204086 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.625232935 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.643377066 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.643408060 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.643448114 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.643505096 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.643546104 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.643726110 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.643740892 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.643815041 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.643821001 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.644687891 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.644761086 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.645205975 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.645347118 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.645347118 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.645353079 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.645359993 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.647273064 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.647279978 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.647332907 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.647381067 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.647423029 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.647490978 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.647691011 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.647692919 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.647706985 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.647732019 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.684699059 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.684849024 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.685076952 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.685076952 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.685424089 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.685444117 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.688513994 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.688550949 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.689352989 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.689371109 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.689423084 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.689438105 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.689526081 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.689646959 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.689646959 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.689740896 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.689757109 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.692064047 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.692096949 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:22.692188025 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.692272902 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:22.692285061 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.266870975 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.267765999 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.267765999 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.267781973 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.267792940 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.280987024 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.281488895 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.281553030 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.282021046 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.282036066 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.342811108 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.343228102 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.343255997 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.343888044 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.343898058 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.350866079 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.351242065 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.351304054 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.351751089 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.351763964 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.357789040 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.358130932 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.358150005 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.358472109 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.358486891 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.369705915 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.369885921 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.369951010 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.369951010 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.369980097 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.369992971 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.372889042 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.372929096 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.372986078 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.373123884 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.373138905 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.380057096 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.380350113 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.380417109 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.380417109 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.380481958 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.380516052 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.382728100 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.382817030 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.382903099 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.383044004 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.383080006 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.442682981 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.442773104 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.442848921 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.442878008 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.442908049 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.442989111 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.443083048 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.443083048 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.443109035 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.443130016 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.445194006 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.445247889 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.445324898 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.445441008 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.445458889 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.454077959 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.454252958 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.454340935 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.454380035 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.454413891 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.454471111 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.454514980 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.454544067 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.454545021 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.454565048 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.454582930 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.456382990 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.456401110 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.456485033 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.456633091 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.456645012 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.459101915 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.459233046 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.459284067 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.459367037 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.459386110 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.459424973 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.459434986 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.460954905 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.461046934 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:23.461179018 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.461282969 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:23.461306095 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.043807983 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.044225931 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.044284105 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.044810057 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.044825077 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.056926012 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.057272911 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.057297945 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.057715893 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.057722092 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.085776091 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.086268902 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.086299896 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.086759090 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.086770058 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.302824020 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.302875042 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.302944899 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.303021908 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.303025961 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.303076029 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.303206921 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.303206921 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.303231955 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.303237915 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.303246021 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.303267002 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.303282022 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.303292990 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.305355072 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.305860043 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.305953026 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.306057930 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.306201935 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.306222916 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.306281090 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.306360006 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.306418896 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.306442022 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.306476116 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.306526899 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.306550980 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.306837082 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.306850910 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.393469095 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.393562078 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.393687010 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.393740892 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.393810034 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.393810034 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.393891096 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.393933058 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.396449089 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.396555901 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.396724939 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.397030115 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.397063971 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.405277967 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.405424118 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.405524969 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.405611992 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.405611992 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.405653954 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.405684948 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.407576084 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.407618999 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.407783985 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.407783985 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.407816887 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.944560051 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.945478916 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.945478916 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.945544958 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.945605040 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.947462082 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.948143005 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.948143005 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:24.948160887 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:24.948193073 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.007622957 CEST	49841	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:25.007693052 CEST	443	49841	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:25.007858038 CEST	49841	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:25.008409023 CEST	49841	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:46:25.008429050 CEST	443	49841	40.113.103.199	192.168.2.6
Oct 6, 2024 18:46:25.039787054 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.040744066 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.040744066 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.040819883 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.040867090 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.047548056 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.047710896 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.047763109 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.047837019 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.047900915 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.047915936 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.047940969 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.047946930 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.050254107 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.050292015 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.050308943 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.050534010 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.050534010 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.050575972 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.050735950 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.050863981 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.050863981 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.051578045 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.051589012 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.052989960 CEST	49843	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.053055048 CEST	443	49843	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.053147078 CEST	49843	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.053292990 CEST	49843	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.053308010 CEST	443	49843	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.055028915 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.055763960 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.055764914 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.055789948 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.055828094 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.138719082 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.138878107 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.138988972 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.139167070 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.139168024 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.139215946 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.139245987 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.142241955 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.142292976 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 6, 2024 18:46:25.142493963 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.143320084 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:46:25.143353939 CEST	443	49844	13.107.246.45	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 18:46:02.389235020 CEST	53	64368	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:02.903352022 CEST	53	64804	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:03.786796093 CEST	50098	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:03.786981106 CEST	64536	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:03.797521114 CEST	53	64536	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:03.810623884 CEST	53	50098	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:03.811378956 CEST	53300	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:03.822817087 CEST	53	53300	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:03.899175882 CEST	53	55700	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:03.934262037 CEST	65287	53	192.168.2.6	8.8.8.8
Oct 6, 2024 18:46:03.934963942 CEST	59949	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:03.941044092 CEST	53	65287	8.8.8.8	192.168.2.6
Oct 6, 2024 18:46:03.943217993 CEST	53	59949	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:04.941550016 CEST	63105	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:04.941673994 CEST	64127	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:05.127522945 CEST	53	63105	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:05.138519049 CEST	53	64127	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:05.252604961 CEST	53451	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:05.252731085 CEST	60168	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:05.259660959 CEST	53	53451	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:05.260520935 CEST	53	60168	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:10.160345078 CEST	57328	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:10.161036968 CEST	63790	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:10.171905994 CEST	53	57328	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:10.173521996 CEST	53	63790	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:10.196875095 CEST	62539	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:10.208115101 CEST	53	62539	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:10.212935925 CEST	55975	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:10.213376045 CEST	53918	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:46:10.233571053 CEST	53	55975	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:10.233619928 CEST	53	53918	1.1.1.1	192.168.2.6
Oct 6, 2024 18:46:20.984546900 CEST	53	59441	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 18:46:03.786796093 CEST	192.168.2.6	1.1.1.1	0x836b	Standard query (0)	us-usps-mntmkm.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:03.786981106 CEST	192.168.2.6	1.1.1.1	0xd97a	Standard query (0)	us-usps-mntmkm.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:46:03.811378956 CEST	192.168.2.6	1.1.1.1	0xaf44	Standard query (0)	us-usps-mntmkm.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:03.934262037 CEST	192.168.2.6	8.8.8.8	0x2e83	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:03.934963942 CEST	192.168.2.6	1.1.1.1	0xa188	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:04.941550016 CEST	192.168.2.6	1.1.1.1	0xd006	Standard query (0)	us-usps-mntmkm.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:04.941673994 CEST	192.168.2.6	1.1.1.1	0x8e17	Standard query (0)	us-usps-mntmkm.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:46:05.252604961 CEST	192.168.2.6	1.1.1.1	0x3af5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:05.252731085 CEST	192.168.2.6	1.1.1.1	0xa1f9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 18:46:10.160345078 CEST	192.168.2.6	1.1.1.1	0x8376	Standard query (0)	us-usps-mntmkm.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:10.161036968 CEST	192.168.2.6	1.1.1.1	0xdf68	Standard query (0)	us-usps-mntmkm.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:46:10.196875095 CEST	192.168.2.6	1.1.1.1	0xe25	Standard query (0)	us-usps-mntmkm.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:10.212935925 CEST	192.168.2.6	1.1.1.1	0x6f13	Standard query (0)	us-usps-mntmkm.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:10.213376045 CEST	192.168.2.6	1.1.1.1	0xbf75	Standard query (0)	us-usps-mntmkm.xyz	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 18:46:03.797521114 CEST	1.1.1.1	192.168.2.6	0xd97a	Name error (3)	us-usps-mntmkm.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:46:03.810623884 CEST	1.1.1.1	192.168.2.6	0x836b	Name error (3)	us-usps-mntmkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:03.822817087 CEST	1.1.1.1	192.168.2.6	0xaf44	Name error (3)	us-usps-mntmkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:03.941044092 CEST	8.8.8.8	192.168.2.6	0x2e83	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:03.943217993 CEST	1.1.1.1	192.168.2.6	0xa188	No error (0)	google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:05.127522945 CEST	1.1.1.1	192.168.2.6	0xd006	Name error (3)	us-usps-mntmkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:05.138519049 CEST	1.1.1.1	192.168.2.6	0x8e17	Name error (3)	us-usps-mntmkm.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:46:05.259660959 CEST	1.1.1.1	192.168.2.6	0x3af5	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:05.260520935 CEST	1.1.1.1	192.168.2.6	0xa1f9	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 18:46:10.171905994 CEST	1.1.1.1	192.168.2.6	0x8376	Name error (3)	us-usps-mntmkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:10.173521996 CEST	1.1.1.1	192.168.2.6	0xdf68	Name error (3)	us-usps-mntmkm.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:46:10.208115101 CEST	1.1.1.1	192.168.2.6	0xe25	Name error (3)	us-usps-mntmkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:10.233571053 CEST	1.1.1.1	192.168.2.6	0x6f13	Name error (3)	us-usps-mntmkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:10.233619928 CEST	1.1.1.1	192.168.2.6	0xbf75	Name error (3)	us-usps-mntmkm.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:46:16.930870056 CEST	1.1.1.1	192.168.2.6	0xecfa	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:46:16.930870056 CEST	1.1.1.1	192.168.2.6	0xecfa	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:18.003091097 CEST	1.1.1.1	192.168.2.6	0xefee	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:46:18.003091097 CEST	1.1.1.1	192.168.2.6	0xefee	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49714	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:03 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4c 78 7a 72 57 67 34 6a 66 6b 36 39 43 2b 71 51 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 30 30 66 63 61 36 61 36 30 35 30 63 65 66 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: LxzrWg4jfk69C+qQ.1Context: 200fca6a6050cef7
2024-10-06 16:46:03 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-06 16:46:03 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4c 78 7a 72 57 67 34 6a 66 6b 36 39 43 2b 71 51 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 30 30 66 63 61 36 61 36 30 35 30 63 65 66 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4a 6a 4a 59 77 4c 6b 54 75 2b 43 6f 71 52 45 65 70 52 4b 39 6b 79 4e 43 30 69 75 71 57 69 77 2f 36 6a 57 76 75 5a 6c 65 31 70 58 64 70 56 72 4e 7a 68 38 67 39 53 6b 68 4c 6d 41 64 39 45 36 58 66 32 30 35 33 51 44 73 75 67 45 2f 77 4f 62 75 67 6a 47 41 52 68 65 67 69 6f 66 62 76 66 50 76 34 37 61 41 43 65 5a 63 33 33 44 54 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: LxzrWg4jfk69C+qQ.2Context: 200fca6a6050cef7<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWJjJYwLkTu+CoqREepRK9kyNC0iuqWiw/6jWvuZle1pXdpVrNzh8g9SkhLmAd9E6Xf2053QDsugE/wObugjGARhegiofbvfPv47aACeZc33DT
2024-10-06 16:46:03 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4c 78 7a 72 57 67 34 6a 66 6b 36 39 43 2b 71 51 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 30 30 66 63 61 36 61 36 30 35 30 63 65 66 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: LxzrWg4jfk69C+qQ.3Context: 200fca6a6050cef7<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-06 16:46:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-06 16:46:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 74 42 6d 75 57 4e 2f 4f 45 4f 6c 70 54 32 71 34 64 61 58 30 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ttBmuWN/OEOlpT2q4daX0g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:06 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:06 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:06 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164606Z-1657d5bbd48jwrqbupe3ktsx9w00000002cg00000000m7b2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:06 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-06 16:46:06 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-06 16:46:06 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-06 16:46:06 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-06 16:46:06 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-06 16:46:06 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-06 16:46:06 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-06 16:46:06 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-06 16:46:06 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-06 16:46:06 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:07 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:07 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164607Z-1657d5bbd48qjg85buwfdynm5w000000028g00000000mqnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:07 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:07 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:07 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164607Z-1657d5bbd48cpbzgkvtewk0wu000000002d0000000004476 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:07 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:07 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:07 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164607Z-1657d5bbd48762wn1qw4s5sd30000000024000000000bfvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:07 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:07 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:07 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164607Z-1657d5bbd48p2j6x2quer0q02800000002d000000000f9dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:07 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:07 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 28f6fc08-301e-0020-466a-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164607Z-1657d5bbd48sqtlf1huhzuwq7000000001z000000000ewhy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:08 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164608Z-1657d5bbd48p2j6x2quer0q02800000002c000000000knu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:08 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164608Z-1657d5bbd48vlsxxpe15ac3q7n000000029g0000000036z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:08 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164608Z-1657d5bbd48f7nlxc7n5fnfzh000000001vg00000000fhrw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:08 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:08 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164608Z-1657d5bbd48xsz2nuzq4vfrzg8000000022g00000000gxnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:08 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:08 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:08 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164608Z-1657d5bbd48xsz2nuzq4vfrzg8000000024g0000000092m1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:08 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:09 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164609Z-1657d5bbd48q6t9vvmrkd293mg000000029g000000004uk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:09 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164609Z-1657d5bbd487nf59mzf5b3gk8n00000001u000000000khmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:09 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164609Z-1657d5bbd48sqtlf1huhzuwq7000000001vg00000000tvvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:09 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164609Z-1657d5bbd482tlqpvyz9e93p5400000002bg000000008cax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:09 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164609Z-1657d5bbd48xsz2nuzq4vfrzg8000000022g00000000gxpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:10 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164610Z-1657d5bbd48cpbzgkvtewk0wu000000002cg000000005xpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:10 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164610Z-1657d5bbd48lknvp09v995n79000000001t000000000q7yz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:10 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164610Z-1657d5bbd482tlqpvyz9e93p5400000002b000000000auhg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:10 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:10 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164610Z-1657d5bbd4824mj9d6vp65b6n400000002bg00000000psh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:10 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:10 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164610Z-1657d5bbd48762wn1qw4s5sd30000000023g00000000dcf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:10 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164610Z-1657d5bbd48xlwdx82gahegw4000000002eg00000000bykt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:10 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164610Z-1657d5bbd48762wn1qw4s5sd30000000021g00000000n523 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:11 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: d112c6a6-a01e-000d-2160-17d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164611Z-1657d5bbd48f7nlxc7n5fnfzh000000001sg00000000t0eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:11 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:11 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164611Z-1657d5bbd482lxwq1dp2t1zwkc000000021g0000000078fx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:11 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:11 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:11 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164611Z-1657d5bbd48brl8we3nu8cxwgn00000002f000000000pz2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:11 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:11 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164611Z-1657d5bbd482tlqpvyz9e93p54000000029000000000g27q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:11 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:11 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164611Z-1657d5bbd48lknvp09v995n79000000001sg00000000sf58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:11 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164611Z-1657d5bbd48xdq5dkwwugdpzr000000002n0000000005a7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:11 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 688d2aae-a01e-0084-3466-179ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164611Z-1657d5bbd482lxwq1dp2t1zwkc00000001yg00000000gunv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:11 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:11 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164611Z-1657d5bbd482lxwq1dp2t1zwkc000000022g000000003fpy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49753	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:12 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 6b 61 52 78 63 48 35 51 45 47 33 62 31 2b 52 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 33 63 35 35 33 61 36 31 61 35 61 65 64 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: skaRxcH5QEG3b1+R.1Context: ae3c553a61a5aedd
2024-10-06 16:46:12 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-06 16:46:12 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 73 6b 61 52 78 63 48 35 51 45 47 33 62 31 2b 52 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 33 63 35 35 33 61 36 31 61 35 61 65 64 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4a 6a 4a 59 77 4c 6b 54 75 2b 43 6f 71 52 45 65 70 52 4b 39 6b 79 4e 43 30 69 75 71 57 69 77 2f 36 6a 57 76 75 5a 6c 65 31 70 58 64 70 56 72 4e 7a 68 38 67 39 53 6b 68 4c 6d 41 64 39 45 36 58 66 32 30 35 33 51 44 73 75 67 45 2f 77 4f 62 75 67 6a 47 41 52 68 65 67 69 6f 66 62 76 66 50 76 34 37 61 41 43 65 5a 63 33 33 44 54 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: skaRxcH5QEG3b1+R.2Context: ae3c553a61a5aedd<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWJjJYwLkTu+CoqREepRK9kyNC0iuqWiw/6jWvuZle1pXdpVrNzh8g9SkhLmAd9E6Xf2053QDsugE/wObugjGARhegiofbvfPv47aACeZc33DT
2024-10-06 16:46:12 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 73 6b 61 52 78 63 48 35 51 45 47 33 62 31 2b 52 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 65 33 63 35 35 33 61 36 31 61 35 61 65 64 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: skaRxcH5QEG3b1+R.3Context: ae3c553a61a5aedd<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-06 16:46:12 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-06 16:46:12 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 71 6b 79 52 4a 73 78 6a 57 45 32 58 66 69 57 77 57 6a 75 4b 6f 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: qkyRJsxjWE2XfiWwWjuKoA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:12 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:12 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164612Z-1657d5bbd48vlsxxpe15ac3q7n000000027g00000000a31v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:12 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:12 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164612Z-1657d5bbd48lknvp09v995n79000000001t000000000q83n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:12 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164612Z-1657d5bbd482tlqpvyz9e93p54000000028000000000mxgt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:12 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:12 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164612Z-1657d5bbd48gqrfwecymhhbfm800000000yg00000000r7p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:12 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:12 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:12 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164612Z-1657d5bbd48dfrdj7px744zp8s00000001wg00000000qzrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:12 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:13 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:13 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164613Z-1657d5bbd48brl8we3nu8cxwgn00000002e000000000t74u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:13 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:13 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:13 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164613Z-1657d5bbd48xlwdx82gahegw4000000002h00000000029kq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:13 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:13 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164613Z-1657d5bbd48dfrdj7px744zp8s00000001z000000000g2v7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:13 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:13 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 11b227e2-601e-0002-7f6b-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164613Z-1657d5bbd48f7nlxc7n5fnfzh000000001z0000000002zq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:13 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:13 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:13 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164613Z-1657d5bbd48q6t9vvmrkd293mg000000025g00000000hg30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:13 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:14 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:14 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164614Z-1657d5bbd487nf59mzf5b3gk8n00000001sg00000000phf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:14 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:14 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:14 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164614Z-1657d5bbd48jwrqbupe3ktsx9w00000002c000000000n4gu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:14 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:14 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:14 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164614Z-1657d5bbd48p2j6x2quer0q02800000002hg000000001bsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:14 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:14 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:14 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164614Z-1657d5bbd48dfrdj7px744zp8s00000001xg00000000mu0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:14 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:14 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:14 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164614Z-1657d5bbd48jwrqbupe3ktsx9w00000002dg00000000gexv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:14 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:14 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164614Z-1657d5bbd48f7nlxc7n5fnfzh000000001tg00000000q4gg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:14 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:14 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164614Z-1657d5bbd48xlwdx82gahegw4000000002a000000000tq90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:14 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164614Z-1657d5bbd48762wn1qw4s5sd30000000023000000000eww1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:14 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164614Z-1657d5bbd48q6t9vvmrkd293mg0000000280000000009gbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:14 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164615Z-1657d5bbd482lxwq1dp2t1zwkc0000000210000000008a9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:15 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:15 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164615Z-1657d5bbd48cpbzgkvtewk0wu000000002ag00000000dcdk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:15 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 27cd2a1a-001e-0046-1b08-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164615Z-1657d5bbd482tlqpvyz9e93p5400000002e0000000000x67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:15 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:15 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 46a5aa72-701e-0032-6004-17a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164615Z-1657d5bbd48q6t9vvmrkd293mg00000002a0000000002ft3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:15 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164615Z-1657d5bbd48tqvfc1ysmtbdrg0000000023000000000ed6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:15 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164615Z-1657d5bbd48vlsxxpe15ac3q7n00000002800000000091hd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:16 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:16 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164616Z-1657d5bbd48p2j6x2quer0q02800000002ag00000000re7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:16 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:16 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:16 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164616Z-1657d5bbd48tqvfc1ysmtbdrg0000000025g0000000057mp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:16 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:16 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:16 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164616Z-1657d5bbd48brl8we3nu8cxwgn00000002n0000000005511 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:16 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:16 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:16 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164616Z-1657d5bbd482krtfgrg72dfbtn00000002200000000053vz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:16 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:16 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164616Z-1657d5bbd48wd55zet5pcra0cg000000023g00000000qp91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:17 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164617Z-1657d5bbd48p2j6x2quer0q02800000002b000000000p2e4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:17 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:17 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164617Z-1657d5bbd48xsz2nuzq4vfrzg8000000020000000000rvnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:17 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:17 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164617Z-1657d5bbd48lknvp09v995n79000000001zg000000001087 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:17 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:17 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164617Z-1657d5bbd48sqtlf1huhzuwq7000000001w000000000rmf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:17 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:17 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164617Z-1657d5bbd4824mj9d6vp65b6n400000002bg00000000pt1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:17 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:17 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164617Z-1657d5bbd482krtfgrg72dfbtn00000001y000000000hs26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:17 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:17 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 897bc565-f01e-0096-5e60-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164617Z-1657d5bbd482krtfgrg72dfbtn00000001zg00000000dany x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:17 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:17 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:17 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164617Z-1657d5bbd48wd55zet5pcra0cg00000002ag000000000skv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:18 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:17 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164618Z-1657d5bbd48f7nlxc7n5fnfzh000000001vg00000000fmc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:18 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164618Z-1657d5bbd48q6t9vvmrkd293mg00000002ag000000000y4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:18 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3c7823fd-401e-0015-0c60-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164618Z-1657d5bbd48sdh4cyzadbb3748000000025g0000000043gz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:18 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164618Z-1657d5bbd48gqrfwecymhhbfm8000000012000000000cgg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:18 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164618Z-1657d5bbd48tnj6wmberkg2xy8000000028000000000nhee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:18 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:18 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164618Z-1657d5bbd48xdq5dkwwugdpzr000000002k000000000cq54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:18 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:18 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:18 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164618Z-1657d5bbd48xlwdx82gahegw4000000002fg000000007p1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:18 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:19 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:19 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164619Z-1657d5bbd48xdq5dkwwugdpzr000000002n0000000005atc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:19 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:19 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:19 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164619Z-1657d5bbd48tqvfc1ysmtbdrg0000000023000000000edke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:19 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:19 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:19 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164619Z-1657d5bbd482krtfgrg72dfbtn000000023g000000000348 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:19 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:19 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:19 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164619Z-1657d5bbd48tnj6wmberkg2xy8000000026g00000000tnkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:19 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:19 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:19 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164619Z-1657d5bbd48brl8we3nu8cxwgn00000002kg00000000a5sv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:19 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:20 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:20 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:20 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164620Z-1657d5bbd4824mj9d6vp65b6n400000002eg00000000c54h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:20 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:20 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:20 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:20 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164620Z-1657d5bbd48jwrqbupe3ktsx9w00000002gg000000005etr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:20 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:20 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:20 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:20 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164620Z-1657d5bbd48xlwdx82gahegw4000000002h0000000002a1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:20 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:20 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:20 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:20 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164620Z-1657d5bbd48lknvp09v995n79000000001zg0000000010dw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:20 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:20 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:20 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:20 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164620Z-1657d5bbd48f7nlxc7n5fnfzh000000001u000000000n17z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:20 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:20 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:20 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164620Z-1657d5bbd48q6t9vvmrkd293mg000000027000000000cevf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:21 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:20 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:21 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b6c21a8e-c01e-008e-115a-177381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164621Z-1657d5bbd482tlqpvyz9e93p5400000002c00000000075pw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:21 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:21 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:20 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164620Z-1657d5bbd48p2j6x2quer0q02800000002dg00000000dzzw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:21 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:21 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:21 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164621Z-1657d5bbd48xlwdx82gahegw4000000002eg00000000bz84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:21 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:21 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:21 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164621Z-1657d5bbd48q6t9vvmrkd293mg0000000280000000009gq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:21 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:21 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:21 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164621Z-1657d5bbd48cpbzgkvtewk0wu000000002b000000000b496 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:21 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:21 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:21 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: c7b66cba-b01e-005c-04ff-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164621Z-1657d5bbd48p2j6x2quer0q02800000002bg00000000mgf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:21 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:21 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:21 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164621Z-1657d5bbd48sqtlf1huhzuwq7000000001vg00000000twc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:21 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:21 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:21 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164621Z-1657d5bbd482tlqpvyz9e93p5400000002e0000000000xfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:21 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:21 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:21 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164621Z-1657d5bbd48sqtlf1huhzuwq7000000001xg00000000k69y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:21 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:22 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:22 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164622Z-1657d5bbd48762wn1qw4s5sd30000000024g00000000994p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:22 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:22 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:22 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164622Z-1657d5bbd48xdq5dkwwugdpzr000000002gg00000000kngz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:22 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:22 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:22 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164622Z-1657d5bbd48tqvfc1ysmtbdrg00000000270000000000f36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:22 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:22 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 52963dc7-601e-0084-0e74-176b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164622Z-1657d5bbd48f7nlxc7n5fnfzh000000001y0000000007h89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:22 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:22 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:22 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164622Z-1657d5bbd48vlsxxpe15ac3q7n000000025000000000n2kr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:22 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:23 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:23 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fbb49b00-e01e-00aa-4806-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164623Z-1657d5bbd482tlqpvyz9e93p5400000002e0000000000xk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:23 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:23 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:23 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164623Z-1657d5bbd482tlqpvyz9e93p54000000027000000000pvds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:23 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:23 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:23 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164623Z-1657d5bbd48762wn1qw4s5sd3000000001zg00000000taqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:23 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:23 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:23 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164623Z-1657d5bbd4824mj9d6vp65b6n400000002cg00000000krud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:23 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:23 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:23 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:23 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 6dc6331d-801e-0047-0866-177265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164623Z-1657d5bbd48sdh4cyzadbb3748000000021000000000hxku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:23 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:24 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:24 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: d4fd285a-d01e-005a-06ed-167fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164624Z-1657d5bbd48tqvfc1ysmtbdrg000000002600000000048ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:24 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:24 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:24 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a18d9b1d-601e-0002-1f03-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164624Z-1657d5bbd48wd55zet5pcra0cg00000002a00000000021mw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:24 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:24 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 4d5cca78-701e-0021-6ae5-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164624Z-1657d5bbd48sdh4cyzadbb3748000000022000000000feux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:24 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:24 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 76dbcc6a-501e-0035-36ed-16c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164624Z-1657d5bbd48cpbzgkvtewk0wu0000000026g00000000sa2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:24 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:24 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:24 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 838d785c-001e-0014-24fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164624Z-1657d5bbd48xdq5dkwwugdpzr000000002h000000000gy6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:24 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 4d8e5842-701e-0021-0efe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164624Z-1657d5bbd48t66tjar5xuq22r8000000026g00000000dvxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:25 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8a56303a-c01e-0066-0f01-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164625Z-1657d5bbd48sqtlf1huhzuwq70000000020000000000a77y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:25 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: cd0b82ba-d01e-0049-1304-17e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164625Z-1657d5bbd48t66tjar5xuq22r8000000025000000000mawg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:25 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: d3a3eb01-b01e-003d-1ef1-16d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164625Z-1657d5bbd48q6t9vvmrkd293mg000000023000000000rh77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:25 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c184816-a01e-000d-72ff-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164625Z-1657d5bbd4824mj9d6vp65b6n400000002cg00000000ks0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:25 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 4d8e59a4-701e-0021-64fe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164625Z-1657d5bbd48tqvfc1ysmtbdrg0000000024000000000chvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:25 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:46:25 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:46:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: ca2bab4f-201e-0071-5e14-17ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T164625Z-1657d5bbd48p2j6x2quer0q02800000002gg0000000049ky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:46:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49841	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:25 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 76 4b 32 2b 2f 7a 45 38 44 6b 4f 2f 45 46 54 78 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 33 34 34 32 39 63 36 30 38 30 61 36 62 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: vK2+/zE8DkO/EFTx.1Context: a634429c6080a6b7
2024-10-06 16:46:25 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-06 16:46:25 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 76 4b 32 2b 2f 7a 45 38 44 6b 4f 2f 45 46 54 78 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 33 34 34 32 39 63 36 30 38 30 61 36 62 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 4a 6a 4a 59 77 4c 6b 54 75 2b 43 6f 71 52 45 65 70 52 4b 39 6b 79 4e 43 30 69 75 71 57 69 77 2f 36 6a 57 76 75 5a 6c 65 31 70 58 64 70 56 72 4e 7a 68 38 67 39 53 6b 68 4c 6d 41 64 39 45 36 58 66 32 30 35 33 51 44 73 75 67 45 2f 77 4f 62 75 67 6a 47 41 52 68 65 67 69 6f 66 62 76 66 50 76 34 37 61 41 43 65 5a 63 33 33 44 54 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: vK2+/zE8DkO/EFTx.2Context: a634429c6080a6b7<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWJjJYwLkTu+CoqREepRK9kyNC0iuqWiw/6jWvuZle1pXdpVrNzh8g9SkhLmAd9E6Xf2053QDsugE/wObugjGARhegiofbvfPv47aACeZc33DT
2024-10-06 16:46:25 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 76 4b 32 2b 2f 7a 45 38 44 6b 4f 2f 45 46 54 78 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 33 34 34 32 39 63 36 30 38 30 61 36 62 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: vK2+/zE8DkO/EFTx.3Context: a634429c6080a6b7<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-06 16:46:26 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-06 16:46:26 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 44 4f 58 31 44 41 36 76 4d 55 57 49 72 76 70 69 51 77 74 4f 2f 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: DOX1DA6vMUWIrvpiQwtO/w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:26 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:46:26 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2888, Parent PID: 6092

General

Target ID:	0
Start time:	12:45:57
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5004, Parent PID: 2888

General

Target ID:	2
Start time:	12:45:59
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2200,i,13842176120624317952,14536439779817096252,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 884, Parent PID: 6092

General

Target ID:	3
Start time:	12:46:03
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-mntmkm.xyz/update/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://us-usps-mntmkm.xyz/update/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2888, Parent PID: 6092

General

Chronological Activities

Analysis Process: chrome.exePID: 5004, Parent PID: 2888

General

Chronological Activities

Analysis Process: chrome.exePID: 884, Parent PID: 6092

General

Chronological Activities

Disassembly

Windows Analysis Report
https://us-usps-mntmkm.xyz/update/