Edit tour

Windows Analysis Report
https://us-usps-nwwypi.xyz/update/

Overview

General Information

Sample URL:	https://us-usps-nwwypi.xyz/update/
Analysis ID:	1526982
Tags:	openphish
Infos:

Errors URL not reachable

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Performs DNS queries to domains with low reputation

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2240,i,6857383791472899497,15531192649493710921,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-nwwypi.xyz/update/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900C4F3X-BM-CBT: 1696488253X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: 1D6F504B5A5A465DBDB84F31C63A581DX-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900C4F3X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshldspcl40,msbdsborgv2co,msbwdsbi920cf,optfsth3,premsbdsbchtupcf,wsbfixcachec,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-cX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 516Connection: Keep-AliveCache-Control: no-cacheCookie: SRCHUID=V=2&GUID=CE2BE0509FF742BD822F50D98AD10391&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&HV=1696488191&IPMH=5767d621&IPMID=1696488252989&LUT=1696487541024; MUID=81C61E09498D41CC97CDBBA354824ED1; _SS=SID=1D9FAF807E686D422B86BC217FC66C71&CPID=1696488253968&AC=1&CPH=071f2185; _EDGE_S=SID=1D9FAF807E686D422B86BC217FC66C71; MUIDB=81C61E09498D41CC97CDBBA354824ED1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49737 version: TLS 1.2

Source: classification engine

Classification label: mal52.troj.win@19/0@14/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2240,i,6857383791472899497,15531192649493710921,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-nwwypi.xyz/update/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2240,i,6857383791472899497,15531192649493710921,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://us-usps-nwwypi.xyz/update/	100%	SlashNext	Fraudulent Website type: Phishing & Social usering

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
google.com	142.250.185.206	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
us-usps-nwwypi.xyz	unknown	unknown	true	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.185.100	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526982
Start date and time:	2024-10-06 18:51:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us-usps-nwwypi.xyz/update/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.troj.win@19/0@14/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	URL browsing timeout or error

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.185.142, 66.102.1.84, 34.104.35.123, 184.28.90.27, 20.109.210.53, 192.229.221.95, 13.85.23.206, 199.232.214.172
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, clients2.google.com, ocsp.digicert.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://us-usps-nwwypi.xyz/update/

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 18:51:59.854434013 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:51:59.854434967 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:00.151231050 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:06.149930000 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:06.150021076 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:06.150130987 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:06.150775909 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:06.150854111 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:07.197431087 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:07.197529078 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:07.206602097 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:07.206655979 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:07.207422972 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:07.221724987 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:07.221808910 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:07.221843004 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:07.221882105 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:07.263487101 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:07.395946026 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:07.396169901 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:07.396400928 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:07.397188902 CEST	49710	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:07.397231102 CEST	443	49710	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:09.462372065 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:09.462372065 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:09.754479885 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:11.302747011 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:11.302845001 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:11.302927017 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:11.303438902 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:11.303467989 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:11.909249067 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:11.909312010 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:11.911434889 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:11.917764902 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:11.917788982 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:11.989576101 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:11.990679979 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.000502110 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.000520945 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.000819921 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.020216942 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.067410946 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.123811007 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.123874903 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.123960972 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.124011993 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.124047041 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.124075890 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.124370098 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.215224981 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.215271950 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.215373993 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.215374947 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.215410948 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.216149092 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.216734886 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.216777086 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.216871023 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.216871023 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.216886044 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.217653036 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.306902885 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.306951046 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.307070017 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.307070017 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.307092905 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.307868004 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.307914972 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.307962894 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.307976007 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.308005095 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.308099985 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.308414936 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.308463097 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.308506966 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.308517933 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.308554888 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.309151888 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.311471939 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.311511993 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.311631918 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.311631918 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.311645031 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.314934969 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.399341106 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.399373055 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.399494886 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.399494886 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.399513006 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.399749041 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.399782896 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.399790049 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.399801970 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.399828911 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.400233984 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.400253057 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.400264978 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.400274992 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.400284052 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.400300026 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.400352001 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.400629044 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.400666952 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.400695086 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.400701046 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.400722027 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.401036978 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.401057005 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.401067972 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.401077032 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.401098967 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.401395082 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.401412964 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.401480913 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.401480913 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.401489019 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.401513100 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.401582003 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.401707888 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.401729107 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.402380943 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.574551105 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:12.600090981 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:12.604753971 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:12.620393038 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:12.750224113 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.762118101 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.762118101 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:12.762164116 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.762191057 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:12.791315079 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:12.791409969 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:12.796572924 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:12.796607018 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:12.796662092 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:12.837093115 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:12.928361893 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:12.928709984 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:12.977726936 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:12.977751970 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:13.003036976 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.003093004 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.003164053 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.003689051 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.003806114 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.003880024 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.005253077 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.005276918 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.005351067 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.005367994 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.005384922 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.005429029 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.005795002 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.005827904 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.005887985 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.005903006 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.005971909 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.005981922 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.006084919 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.006103992 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.010092974 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.010184050 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.010255098 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.010516882 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.010556936 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.024597883 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:13.841976881 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.842761040 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.843328953 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.843358040 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.843483925 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.845176935 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.847842932 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.847848892 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.849714041 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.849760056 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.851212978 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.851219893 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.851797104 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.851828098 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.853796005 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.853801966 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.855704069 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.855722904 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.856931925 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.856936932 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.867408037 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.872306108 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.872312069 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.873775959 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.873790979 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.942701101 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.942771912 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.943824053 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.946216106 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.946238995 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.946254015 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.946261883 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.947674036 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.947696924 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.947751999 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.947762966 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.947818041 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.949372053 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.949424982 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.949696064 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.951353073 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.951381922 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.951474905 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.951491117 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.951535940 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.951544046 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.951559067 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.951600075 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.952158928 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.952178001 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.954420090 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.954446077 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.954473972 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.954479933 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.956362009 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.956367970 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.956386089 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.956393003 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.973385096 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.973440886 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.973587990 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:13.973597050 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.973711014 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:13.973803043 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.154067993 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.154089928 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.176765919 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.176820040 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.178777933 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.178833961 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.178848028 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.180403948 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.180649996 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.180700064 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.180989981 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.182775974 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.182851076 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.183118105 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.185602903 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.185627937 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.185898066 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.185935020 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.185961962 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.186238050 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.186259031 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.186422110 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.186460018 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.186522961 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.186547041 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.186734915 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.186772108 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.874135971 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.874855042 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.874893904 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.875852108 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.875859976 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.884737968 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.885202885 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.885230064 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.885844946 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.885850906 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.886193037 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.886255026 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.886786938 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.886832952 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.886858940 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.886887074 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.886904001 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.887423038 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.887428999 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.887641907 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.887648106 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.887842894 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.887886047 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.888375998 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.888384104 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.972862959 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.972954988 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.973012924 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.973253012 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.973282099 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.973292112 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.973297119 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.977134943 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.977154016 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.977231979 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.977425098 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.977440119 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.984049082 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.984189034 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.984287977 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.984420061 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.984420061 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.984441996 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.984457016 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.985166073 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.985327005 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.985394955 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.985503912 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.985546112 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.985929966 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.986076117 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.986123085 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.986912012 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.986918926 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.986932039 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.986938000 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.987318993 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.987443924 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.987508059 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.987601042 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.987623930 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.990142107 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.990170002 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.990233898 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.990541935 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.990559101 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.990767956 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.990777016 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.990843058 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.991039038 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.991049051 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.991281033 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.991293907 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.991355896 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.991583109 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.991596937 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.992718935 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.992808104 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:14.992898941 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.993074894 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:14.993112087 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:15.585961103 CEST	49737	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:15.586028099 CEST	443	49737	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:15.586106062 CEST	49737	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:15.586935997 CEST	49737	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:15.586950064 CEST	443	49737	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:15.610697031 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:15.611179113 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:15.611216068 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:15.611911058 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:15.611916065 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:15.644784927 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:15.645399094 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:15.645432949 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:15.646298885 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:15.646305084 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.000812054 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.000919104 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.001007080 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.003952026 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.003956079 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.056848049 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.056857109 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.073139906 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.073177099 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.074906111 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.074923038 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.075632095 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.075642109 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.076297045 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.076354027 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.077033043 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.077047110 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.079935074 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.079982996 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.080081940 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.080254078 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.080266953 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.104792118 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.104888916 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.105043888 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.174732924 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.174802065 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.174891949 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.179100990 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.179161072 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.179245949 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.301316023 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.301362991 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.320425034 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.320471048 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.320507050 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.320524931 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.324019909 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.324083090 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.324122906 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.324141979 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.331289053 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.331338882 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.331507921 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.333117008 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.333159924 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.333242893 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.333884954 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.333906889 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.334400892 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.334417105 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.335527897 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.335577965 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.335665941 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.335841894 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.335856915 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.682879925 CEST	443	49737	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:16.683022976 CEST	49737	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:16.719211102 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.774483919 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.830801964 CEST	49737	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:16.830841064 CEST	443	49737	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:16.831202030 CEST	443	49737	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:16.831248999 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.831271887 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.832088947 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.832097054 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.834074020 CEST	49737	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:16.834144115 CEST	49737	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:16.834151030 CEST	443	49737	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:16.834266901 CEST	49737	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:16.879399061 CEST	443	49737	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:16.927131891 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.927222967 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.927284956 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.927571058 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.927596092 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.927609921 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.927617073 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.931472063 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.931520939 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:16.931596041 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.931891918 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:16.931914091 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.009582043 CEST	443	49737	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:17.009660006 CEST	443	49737	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:17.009702921 CEST	49737	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:17.009900093 CEST	49737	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:17.009923935 CEST	443	49737	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:17.449883938 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.450417995 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.450459003 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.451006889 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.451014996 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.452945948 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.453342915 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.453382015 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.453733921 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.453738928 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.453835964 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.454125881 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.454169035 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.454591990 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.454602003 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.551934958 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.552021027 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.552084923 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.552326918 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.552350044 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.552367926 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.552376032 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.555422068 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.555480957 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.555531979 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.555644035 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.555668116 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.555681944 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.555689096 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.556243896 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.556298018 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.556365967 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.556514978 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.556570053 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.556606054 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.556710958 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.556725979 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.556929111 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.556936026 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.556947947 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.556952000 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.558814049 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.558861017 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.558914900 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.559230089 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.559243917 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.559499979 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.559592962 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.559657097 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.559775114 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.559804916 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.638571978 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.639199018 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.639230013 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.639727116 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.639734030 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.741978884 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.742070913 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.742141962 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.742326021 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.742326021 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.742374897 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.742417097 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.745589018 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.745687008 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:17.745769024 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.745939970 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:17.745975971 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.203438997 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.204032898 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.204077959 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.204570055 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.204575062 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.223273039 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.223855972 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.223895073 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.224325895 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.224332094 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.234543085 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.235289097 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.235289097 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.235318899 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.235335112 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.304770947 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.304929018 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.305114985 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.305114985 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.305273056 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.305294991 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.308099985 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.308172941 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.308451891 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.308451891 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.308535099 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.326482058 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.326632977 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.326772928 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.326772928 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.326931953 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.326956034 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.329029083 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.329078913 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.329216957 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.329344034 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.329353094 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.341178894 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.341329098 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.341428041 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.341428995 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.341535091 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.341573954 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.343564034 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.343594074 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.343859911 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.343859911 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.343887091 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.690402985 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.691957951 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.691958904 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.692020893 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.692061901 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.795342922 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.795444012 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.795516968 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.795754910 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.795792103 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.799283028 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.799326897 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.799406052 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.799583912 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.799608946 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.881192923 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.881743908 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.881781101 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.882209063 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.882215977 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.944396973 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.944917917 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.944957018 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.945600033 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.945611000 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.965933084 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.966628075 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.966700077 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.967050076 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.967062950 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.979346991 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.979437113 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.979491949 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.979608059 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.979630947 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.979648113 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.979654074 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.982857943 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.982919931 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:18.983006954 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.983119965 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:18.983134031 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.044761896 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.044904947 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.044981003 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.045258045 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.045286894 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.045301914 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.045308113 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.050002098 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.050055981 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.050137997 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.050457001 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.050471067 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.070509911 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.070583105 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.070642948 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.070820093 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.070839882 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.070853949 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.070858955 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.074826956 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.074919939 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.075022936 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.075164080 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.075201988 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.367947102 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.368566990 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.368586063 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.369402885 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.369410992 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.467915058 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.468544960 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.468564034 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.469206095 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.469213963 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.472697973 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.472858906 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.472918987 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.473036051 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.473052979 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.473074913 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.473082066 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.476661921 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.476771116 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.476866007 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.476994991 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.477016926 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.903151035 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.903228045 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.903599024 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.903867006 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.903867006 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.903893948 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.903903008 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.908190012 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.908268929 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.908350945 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.908533096 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.908560991 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.908835888 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.909209967 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.909285069 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.909641981 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.909662008 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.912245035 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.912600040 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.912658930 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.912947893 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.912962914 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.913065910 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.913414001 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.913449049 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:19.913739920 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:19.913752079 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.011207104 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.011348009 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.011430979 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.011588097 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.011622906 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.011648893 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.011662960 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.014276981 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.014415026 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.014606953 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.014683008 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.014703989 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.014715910 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.014722109 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.015079975 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.015111923 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.015180111 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.015347958 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.015360117 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.017313004 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.017319918 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.017390013 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.017553091 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.017561913 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.017678022 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.017821074 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.017904043 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.017967939 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.017967939 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.018002987 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.018033028 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.020220041 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.020256042 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.020462990 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.020654917 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.020668983 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.452778101 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.453751087 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.453789949 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.454509974 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.454523087 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.516855001 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:20.517019033 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:20.517472982 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:20.517534971 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:20.517627954 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:20.521778107 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:20.521806002 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:20.521956921 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:20.521995068 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:20.551224947 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.551372051 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.551469088 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.567440033 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.567440033 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.567466974 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.567487955 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.573291063 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.573324919 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.573421955 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.574019909 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.574032068 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.636034966 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.664195061 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.684781075 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.685611010 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.688322067 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.716943979 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.732487917 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.733246088 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.744267941 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.744277954 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.745228052 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.745234013 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.745759010 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.745791912 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.746438980 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.746450901 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.746819973 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.746824980 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.747540951 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.747546911 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.747623920 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.747651100 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.748034954 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.748045921 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.843936920 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.844017982 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.844297886 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.844942093 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.845118999 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.845182896 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.845305920 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.845498085 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.845577002 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.846832991 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.846903086 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.847220898 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.910284996 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.910322905 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.910339117 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.910345078 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.912765026 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.912765026 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.912812948 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.912852049 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.914202929 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.914227009 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.914241076 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.914246082 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.923495054 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.923500061 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.943579912 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.943604946 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.943851948 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.945425034 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.945503950 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.945560932 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.948822021 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.948880911 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.949019909 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.951673985 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.951687098 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.953468084 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.953567982 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.953649998 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.953850031 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.953883886 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.954034090 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.954061031 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:20.954205990 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:20.954245090 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.112943888 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:21.113015890 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:21.214382887 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.214792013 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.214828014 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.215511084 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.215516090 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.369175911 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.369333982 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.369440079 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.371263981 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.371289015 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.371300936 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.371306896 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.376049042 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.376163006 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.376252890 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.377403021 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.377437115 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.586061954 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.587579012 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.587605000 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.588102102 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.588107109 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.589581966 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.589690924 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.592714071 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.592742920 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.593357086 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.593364000 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.593950987 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.593971968 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.594626904 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.594635010 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.640217066 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.641228914 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.641288042 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.641841888 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.641858101 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.684859037 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.685013056 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.685096979 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.685149908 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.685173035 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.685188055 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.685194969 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.688515902 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.688589096 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.688662052 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.688812971 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.688829899 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.689398050 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.689462900 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.689706087 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.689802885 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.689855099 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.689883947 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.689901114 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.690200090 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.690270901 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.690371037 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.690673113 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.690690041 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.692802906 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.692836046 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.692996979 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.692996979 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.693022966 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.693815947 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.693823099 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.693933964 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.694036961 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.694051027 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.743980885 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.744126081 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.744267941 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.744267941 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.744349957 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.744390965 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.746186972 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.746227026 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:21.746284008 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.746489048 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:21.746499062 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.044904947 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.054209948 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.054239988 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.055972099 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.055985928 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.154759884 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.154839039 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.154908895 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.158425093 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.158425093 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.158461094 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.158483982 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.171184063 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.171231031 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.171363115 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.176392078 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.176426888 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.211313963 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:22.211404085 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:22.212490082 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:22.212587118 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:22.214019060 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:22.214082003 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:22.214256048 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:22.255454063 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:22.325228930 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.329402924 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.329473019 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.329999924 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.330014944 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.335557938 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.336241961 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.336265087 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.336961985 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.336967945 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.341341972 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.342457056 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.342475891 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.343408108 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.343414068 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.414304018 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.416062117 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.416130066 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.416765928 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.416780949 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.428121090 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.428205013 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.428303957 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.429891109 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.429934025 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.429960966 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.429975986 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.435476065 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.435534954 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.435643911 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.437048912 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.437102079 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.437170982 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.437309980 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.437320948 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.437566042 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.437566042 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.437585115 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.437594891 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.441642046 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.441741943 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.441824913 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.443109035 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.443144083 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.465111971 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.465276957 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.465343952 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.467022896 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.467022896 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.467032909 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.467042923 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.481614113 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.481709957 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.481781960 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.482283115 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.482316971 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.500538111 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:22.500608921 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:22.500649929 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:22.500709057 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:22.500768900 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:22.511399031 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:22.511445999 CEST	443	49760	173.222.162.64	192.168.2.6
Oct 6, 2024 18:52:22.511488914 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:22.511576891 CEST	49760	443	192.168.2.6	173.222.162.64
Oct 6, 2024 18:52:22.523617983 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:22.523763895 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:22.524358034 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:22.751806021 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.751966953 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.752154112 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.752407074 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.752407074 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.752459049 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.752487898 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.762151957 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.762191057 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.762259007 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.762465954 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.762478113 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.945485115 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.946418047 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.946480989 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:22.948215961 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:22.948229074 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.045298100 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.045465946 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.045588970 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.045639992 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.045675993 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.045701981 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.045716047 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.048578978 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.048619032 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.048784971 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.048937082 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.048954964 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.102819920 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.103250027 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.103321075 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.104609013 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.104630947 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.115907907 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.116233110 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.116250038 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.116583109 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.116588116 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.117417097 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.117696047 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.117729902 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.118045092 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.118056059 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.216224909 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.216306925 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.216491938 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.216727018 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.216753960 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.221584082 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.221616983 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.221707106 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.221774101 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.221786022 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.221914053 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.222107887 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.222126007 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.222444057 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.222456932 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.222469091 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.222472906 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.223592997 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.223671913 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.223758936 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.224091053 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.224091053 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.224138021 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.224167109 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.226694107 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.226744890 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.226927042 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.227916002 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.228025913 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.228090048 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.228347063 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.228378057 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.228609085 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.228638887 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.631798029 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.632504940 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.632549047 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.633174896 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.633183002 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.734424114 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.734507084 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.734723091 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.738586903 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.738626957 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.738661051 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.738677025 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.751882076 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.751974106 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.752161026 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.752532005 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.752567053 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.831306934 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.831957102 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.832005978 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.832736969 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.832748890 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.872575045 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.873071909 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.873105049 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.873878002 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.873903990 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.878742933 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.879232883 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.879272938 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.879971027 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.879981995 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.897114038 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.897605896 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.897635937 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.898116112 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.898129940 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.929759026 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.929924011 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.930831909 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.930943966 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.930993080 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.931020975 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.931036949 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.935498953 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.935549974 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.935760021 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.936395884 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.936414957 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.972172976 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.972229004 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.972320080 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.972615004 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.972635031 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.976167917 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.976274967 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.976543903 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.976778984 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.976813078 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.977572918 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.977715015 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.977771044 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.978085995 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.978106976 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.978120089 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.978127956 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.981184959 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.981272936 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:23.981358051 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.981544018 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:23.981579065 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.001619101 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.001688004 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.001812935 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.001879930 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.001880884 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.001919985 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.001944065 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.004007101 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.004036903 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.004106045 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.004239082 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.004257917 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.389266014 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.389803886 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.389863014 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.390291929 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.390311956 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.427036047 CEST	49719	443	192.168.2.6	142.250.185.100
Oct 6, 2024 18:52:24.427104950 CEST	443	49719	142.250.185.100	192.168.2.6
Oct 6, 2024 18:52:24.496512890 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.496593952 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.496725082 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.497064114 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.497093916 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.502588987 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.502625942 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.502742052 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.502907038 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.502927065 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.599445105 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.600106955 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.600142956 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.600615978 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.600627899 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.618686914 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.634192944 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.636312008 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.646115065 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.646183014 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.646230936 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.646248102 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.646543026 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.646559954 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.646600962 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.646610975 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.646724939 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.646749020 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.647102118 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.647106886 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.702636003 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.702733040 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.703414917 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.703464031 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.703490973 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.703511000 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.703519106 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.706851006 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.706892967 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.706974983 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.707240105 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.707253933 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.740879059 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.740968943 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.741044998 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.741260052 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.741307974 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.741339922 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.741357088 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.741858006 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.741998911 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.742070913 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.742667913 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.742667913 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.742696047 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.742749929 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.745285988 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.745376110 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.745573044 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.745661974 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.745717049 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.746236086 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.746265888 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.746275902 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.746323109 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.746560097 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.746593952 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.746663094 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.746710062 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.746740103 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.746756077 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.748002052 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.748025894 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.749114037 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.749140024 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:24.749232054 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.749479055 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:24.749494076 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.988240004 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.988795996 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:25.988838911 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.989362001 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:25.989368916 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.991930008 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.992333889 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:25.992356062 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.992830038 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:25.992836952 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.996905088 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.997343063 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:25.997419119 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.997442007 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.997838020 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:25.997852087 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.997859955 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:25.997894049 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:25.998356104 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:25.998363972 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.003709078 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.004072905 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.004102945 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.004513979 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.004519939 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.088285923 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.088366985 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.088419914 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.088624001 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.088650942 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.088666916 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.088674068 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.090991020 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.091130972 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.091196060 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.091222048 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.091223001 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.091243029 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.091253996 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.092303038 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.092406988 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.092494965 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.092772007 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.092811108 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.094405890 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.094455004 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.094518900 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.094660044 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.094676971 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.096064091 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.096240044 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.096293926 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.096915007 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.096915007 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.096935987 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.096956968 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.099059105 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.099067926 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.099138021 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.099265099 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.099277973 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.099509001 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.099584103 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.099648952 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.099731922 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.099731922 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.099777937 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.099803925 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.101485014 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.101527929 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.101579905 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.101691961 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.101717949 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.110501051 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.110569000 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.110675097 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.110723972 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.110732079 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.110744953 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.110769987 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.112478971 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.112539053 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.112607002 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.112713099 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.112739086 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.754287958 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.754762888 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.754872084 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.754914045 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.755264044 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.755322933 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.755405903 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.755414963 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.755806923 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.755820036 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.756226063 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.756592035 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.756602049 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.757054090 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.757061958 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.760809898 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.761152983 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.761185884 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.761538982 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.761548042 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.764317989 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.764617920 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.764638901 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:26.765024900 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:26.765038967 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175240040 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175268888 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175304890 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175371885 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175380945 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.175463915 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175482035 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.175524950 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175542116 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175565958 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175611019 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175643921 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.175652981 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.175667048 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175699949 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.175699949 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.175718069 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175791979 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175919056 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.175919056 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.175945997 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175957918 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.175973892 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.176809072 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.176809072 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.176815987 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.176825047 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.177814007 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.177824974 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.177846909 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.177848101 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.177864075 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.177870035 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.177881002 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.177912951 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.180954933 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.180999041 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.181082010 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.181090117 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.181119919 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.181216002 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.181988001 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.181991100 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.182001114 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.182050943 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.182252884 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.182252884 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.182317972 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.182351112 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.182360888 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.183374882 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.183475971 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.183527946 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.183566093 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.183648109 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.183649063 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.183769941 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.183783054 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.183943987 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.183973074 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.822089911 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.822143078 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.822783947 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.822801113 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.822861910 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.822890997 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.823402882 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.823406935 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.823409081 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.823412895 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.829417944 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.829827070 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.829839945 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.830311060 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.830315113 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.835103035 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.835517883 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.835556030 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.836046934 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.836055040 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.856942892 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.857366085 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.857395887 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.857959032 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.857976913 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.921629906 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.921705961 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.921847105 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.921961069 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.921988964 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.922004938 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.922009945 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.922406912 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.922481060 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.922528982 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.922683954 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.922708988 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.922720909 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.922724962 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.925631046 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.925648928 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.925656080 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.925710917 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.925734043 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.925760984 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.925890923 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.925910950 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.925962925 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.925976992 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.932651997 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.932744026 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.932802916 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.932956934 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.932977915 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.933005095 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.933017015 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.935348034 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.935425997 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.935513020 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.935765982 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.935797930 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.935811043 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.935895920 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.935941935 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.936023951 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.936043024 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.936057091 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.936063051 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.937941074 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.938031912 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.938114882 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.938242912 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.938277006 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.961688995 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.961777925 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.961896896 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.961935043 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.961935043 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.961954117 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.961963892 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.964366913 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.964395046 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:27.964456081 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.964582920 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:27.964607954 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.561408043 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.562531948 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.562603951 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.563169956 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.563191891 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.573158026 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.573616982 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.573647022 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.574134111 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.574141026 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.578795910 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.579304934 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.579330921 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.579821110 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.579832077 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.593895912 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.594396114 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.594405890 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.594995022 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.595005035 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.609181881 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.609785080 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.609800100 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.610426903 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.610433102 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992299080 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992330074 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992389917 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992391109 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992456913 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992480993 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992484093 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992499113 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992508888 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992518902 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992532015 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992535114 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992557049 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992572069 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992579937 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992590904 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992629051 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992690086 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992702007 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992726088 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992731094 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992775917 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992816925 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992845058 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992867947 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992894888 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992901087 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992901087 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992917061 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.992943048 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.992968082 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.993025064 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.993386984 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.993398905 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.993412971 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.993417025 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.994014025 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.994014025 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.994034052 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.994044065 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.994469881 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.994473934 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.994489908 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.994496107 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.996680975 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.996707916 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.996767998 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.996850967 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.996906996 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.996916056 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.997414112 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.997458935 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.997549057 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.997569084 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.997581959 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.997755051 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.997777939 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.997852087 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.997889996 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.998579025 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.998614073 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.998661995 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.998676062 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.998697996 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.998732090 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.998815060 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.998823881 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:28.998873949 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:28.998894930 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.640677929 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.640949011 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.641165018 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.641191006 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.641295910 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.641319990 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.641710997 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.641716957 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.641767979 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.641772032 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.658490896 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.658782959 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.658803940 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.659141064 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.659145117 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.673644066 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.674381971 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.674397945 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.674761057 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.674766064 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.686451912 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.686736107 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.686774015 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.687104940 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.687110901 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.739970922 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.740153074 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.740168095 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.740219116 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.740463972 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.740480900 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.740490913 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.740497112 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.740645885 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.740685940 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.741595030 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.741611958 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.741626024 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.741632938 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.744293928 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.744348049 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.744544983 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.745227098 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.745271921 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.745372057 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.745384932 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.745393991 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.745475054 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.745492935 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.761219025 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.761251926 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.761329889 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.761358023 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.761375904 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.761480093 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.761495113 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.761504889 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.761509895 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.763533115 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.763542891 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.763607025 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.764058113 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.764069080 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.777848959 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.778142929 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.778359890 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.778541088 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.778544903 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.778559923 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.778562069 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.781052113 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.781094074 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.783943892 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.784392118 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.784410954 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.792810917 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.792989969 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.793030977 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.793118954 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.793123960 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.793135881 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.793140888 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.794918060 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.794945002 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:29.795025110 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.795136929 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:29.795156956 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.495074034 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.495887995 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.495951891 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.496073008 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.496393919 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.496408939 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.496609926 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.496627092 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.496977091 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.496988058 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.498851061 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.499211073 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.499270916 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.499629021 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.499641895 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.503793001 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.504225969 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.504249096 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.504792929 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.504797935 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.506405115 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.506704092 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.506719112 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.507158041 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.507167101 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.594806910 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.594881058 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.595103025 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.595236063 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.595236063 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.595252991 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.595263004 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.595681906 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.595830917 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.595963955 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.596051931 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.596056938 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.599126101 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.599169016 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.599180937 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.599188089 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.599247932 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.599248886 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.599426985 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.599442959 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.599591017 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.599603891 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.599611998 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.599828959 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.599901915 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.599976063 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.599976063 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.600019932 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.600044966 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.601914883 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.601947069 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.602113008 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.602225065 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.602238894 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.605870008 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.606251001 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.606298923 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.606339931 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.606349945 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.606359005 CEST	49816	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.606363058 CEST	443	49816	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.608542919 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.608568907 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.608638048 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.608921051 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.608935118 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.608948946 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.609018087 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.609092951 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.609289885 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.609289885 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.609306097 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.609328032 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.611424923 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.611512899 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:30.611607075 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.611726999 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:30.611762047 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.163348913 CEST	49822	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:31.163459063 CEST	443	49822	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:31.163548946 CEST	49822	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:31.164303064 CEST	49822	443	192.168.2.6	40.113.103.199
Oct 6, 2024 18:52:31.164339066 CEST	443	49822	40.113.103.199	192.168.2.6
Oct 6, 2024 18:52:31.230037928 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.230597973 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.230624914 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.231102943 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.231107950 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.255239964 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.255655050 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.255882978 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.255943060 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.255965948 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.256160021 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.256165981 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.256403923 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.256434917 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.256531000 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.256609917 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.256807089 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.256817102 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.256917953 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.256932020 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.262078047 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.262399912 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.262458086 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.262753010 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.262768030 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.338856936 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.339167118 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.339298964 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.339329958 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.339345932 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.339356899 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.339361906 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.342673063 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.342701912 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.343117952 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.343117952 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.343149900 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.354584932 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.354901075 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.354955912 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.355031967 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.355156898 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.355156898 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.355165958 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.355173111 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.355690956 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.355864048 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.355951071 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.356101036 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.356126070 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.356142044 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.356148005 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.358001947 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.358025074 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.358088017 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.358239889 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.358254910 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.358359098 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.358376980 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.359415054 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.359415054 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.359452963 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.364855051 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.364942074 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.364989996 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.365000963 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.365041018 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.365139961 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.365139961 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.365159035 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.365163088 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.367449045 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.367458105 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.367547035 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.367835999 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.367847919 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.386363983 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.386440992 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.386601925 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.386754990 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.386776924 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.386791945 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.386799097 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.390950918 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.390981913 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 6, 2024 18:52:31.391405106 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.394613028 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 6, 2024 18:52:31.394632101 CEST	443	49827	13.107.246.45	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 18:52:07.873106956 CEST	53	60285	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:07.884735107 CEST	53	58805	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:08.935354948 CEST	53	58841	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:09.740416050 CEST	55871	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:09.740541935 CEST	49373	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:09.752628088 CEST	53	49373	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:09.752887011 CEST	53	55871	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:09.753719091 CEST	51026	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:09.763510942 CEST	53	51026	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:09.897857904 CEST	55283	53	192.168.2.6	8.8.8.8
Oct 6, 2024 18:52:09.898094893 CEST	60166	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:09.905045986 CEST	53	60166	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:09.906434059 CEST	53	55283	8.8.8.8	192.168.2.6
Oct 6, 2024 18:52:10.909270048 CEST	54202	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:10.910051107 CEST	62741	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:10.928292990 CEST	53	54202	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:10.930445910 CEST	53	62741	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:10.960016012 CEST	59633	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:10.960546970 CEST	61923	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:10.969697952 CEST	53	61923	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:10.975014925 CEST	53	59633	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:11.879152060 CEST	55808	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:11.880115032 CEST	61007	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:11.886770964 CEST	53	55808	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:11.887290001 CEST	53	61007	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:16.017759085 CEST	53972	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:16.017992020 CEST	49825	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:16.028418064 CEST	53	49825	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:16.028453112 CEST	53	53972	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:16.070398092 CEST	53228	53	192.168.2.6	1.1.1.1
Oct 6, 2024 18:52:16.091814041 CEST	53	53228	1.1.1.1	192.168.2.6
Oct 6, 2024 18:52:26.287900925 CEST	53	61344	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 18:52:09.740416050 CEST	192.168.2.6	1.1.1.1	0x19bd	Standard query (0)	us-usps-nwwypi.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:09.740541935 CEST	192.168.2.6	1.1.1.1	0x87bc	Standard query (0)	us-usps-nwwypi.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:52:09.753719091 CEST	192.168.2.6	1.1.1.1	0xba2a	Standard query (0)	us-usps-nwwypi.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:09.897857904 CEST	192.168.2.6	8.8.8.8	0x470b	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:09.898094893 CEST	192.168.2.6	1.1.1.1	0xe276	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:10.909270048 CEST	192.168.2.6	1.1.1.1	0xc6e1	Standard query (0)	us-usps-nwwypi.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:10.910051107 CEST	192.168.2.6	1.1.1.1	0x10b8	Standard query (0)	us-usps-nwwypi.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:52:10.960016012 CEST	192.168.2.6	1.1.1.1	0xcb21	Standard query (0)	us-usps-nwwypi.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:10.960546970 CEST	192.168.2.6	1.1.1.1	0x520e	Standard query (0)	us-usps-nwwypi.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:52:11.879152060 CEST	192.168.2.6	1.1.1.1	0x3621	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:11.880115032 CEST	192.168.2.6	1.1.1.1	0xc483	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 18:52:16.017759085 CEST	192.168.2.6	1.1.1.1	0x3aa2	Standard query (0)	us-usps-nwwypi.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:16.017992020 CEST	192.168.2.6	1.1.1.1	0x8f46	Standard query (0)	us-usps-nwwypi.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:52:16.070398092 CEST	192.168.2.6	1.1.1.1	0xed91	Standard query (0)	us-usps-nwwypi.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 18:52:09.752628088 CEST	1.1.1.1	192.168.2.6	0x87bc	Name error (3)	us-usps-nwwypi.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:52:09.752887011 CEST	1.1.1.1	192.168.2.6	0x19bd	Name error (3)	us-usps-nwwypi.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:09.763510942 CEST	1.1.1.1	192.168.2.6	0xba2a	Name error (3)	us-usps-nwwypi.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:09.905045986 CEST	1.1.1.1	192.168.2.6	0xe276	No error (0)	google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:09.906434059 CEST	8.8.8.8	192.168.2.6	0x470b	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:10.928292990 CEST	1.1.1.1	192.168.2.6	0xc6e1	Name error (3)	us-usps-nwwypi.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:10.930445910 CEST	1.1.1.1	192.168.2.6	0x10b8	Name error (3)	us-usps-nwwypi.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:52:10.969697952 CEST	1.1.1.1	192.168.2.6	0x520e	Name error (3)	us-usps-nwwypi.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:52:10.975014925 CEST	1.1.1.1	192.168.2.6	0xcb21	Name error (3)	us-usps-nwwypi.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:11.301865101 CEST	1.1.1.1	192.168.2.6	0x294	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:52:11.301865101 CEST	1.1.1.1	192.168.2.6	0x294	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:11.886770964 CEST	1.1.1.1	192.168.2.6	0x3621	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:11.887290001 CEST	1.1.1.1	192.168.2.6	0xc483	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 18:52:16.028418064 CEST	1.1.1.1	192.168.2.6	0x8f46	Name error (3)	us-usps-nwwypi.xyz	none	none	65	IN (0x0001)	false
Oct 6, 2024 18:52:16.028453112 CEST	1.1.1.1	192.168.2.6	0x3aa2	Name error (3)	us-usps-nwwypi.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:16.091814041 CEST	1.1.1.1	192.168.2.6	0xed91	Name error (3)	us-usps-nwwypi.xyz	none	none	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:20.979126930 CEST	1.1.1.1	192.168.2.6	0xdc4d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:52:20.979126930 CEST	1.1.1.1	192.168.2.6	0xdc4d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:22.109236956 CEST	1.1.1.1	192.168.2.6	0xaa0c	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:52:22.109236956 CEST	1.1.1.1	192.168.2.6	0xaa0c	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

https:

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:07 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 42 51 4c 6e 32 6f 4f 2f 42 6b 36 73 35 44 34 4c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 39 37 39 39 38 31 30 63 39 33 36 35 37 66 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: BQLn2oO/Bk6s5D4L.1Context: f9799810c93657f2
2024-10-06 16:52:07 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-06 16:52:07 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 42 51 4c 6e 32 6f 4f 2f 42 6b 36 73 35 44 34 4c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 39 37 39 39 38 31 30 63 39 33 36 35 37 66 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 48 4a 36 50 53 47 33 77 76 35 36 79 78 54 45 7a 4c 78 62 56 70 45 41 2f 4c 59 74 68 4d 4c 4e 68 33 34 57 72 6f 36 30 61 43 38 66 45 4a 4f 41 6e 73 58 72 54 69 78 2f 50 4b 59 33 76 76 47 33 30 38 50 43 75 74 73 67 57 69 4c 67 77 4c 5a 4c 57 38 34 37 38 32 39 4d 4c 31 54 67 48 6f 59 53 54 5a 6c 6b 56 79 47 44 79 51 54 4f 73 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: BQLn2oO/Bk6s5D4L.2Context: f9799810c93657f2<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYHJ6PSG3wv56yxTEzLxbVpEA/LYthMLNh34Wro60aC8fEJOAnsXrTix/PKY3vvG308PCutsgWiLgwLZLW847829ML1TgHoYSTZlkVyGDyQTOs
2024-10-06 16:52:07 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 42 51 4c 6e 32 6f 4f 2f 42 6b 36 73 35 44 34 4c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 39 37 39 39 38 31 30 63 39 33 36 35 37 66 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: BQLn2oO/Bk6s5D4L.3Context: f9799810c93657f2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-06 16:52:07 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-06 16:52:07 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 47 49 6a 61 36 4e 33 4e 59 55 4b 79 5a 52 72 48 68 51 39 33 41 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: GIja6N3NYUKyZRrHhQ93AA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:12 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:12 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:12 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165212Z-1657d5bbd48vhs7r2p1ky7cs5w00000002h000000000h7pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:12 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-06 16:52:12 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-06 16:52:12 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-06 16:52:12 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-06 16:52:12 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-06 16:52:12 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-06 16:52:12 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-06 16:52:12 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-06 16:52:12 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-06 16:52:12 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:13 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:13 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 28f6fc08-301e-0020-466a-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165213Z-1657d5bbd48gqrfwecymhhbfm800000000zg00000000p4a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:13 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:13 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:13 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c62b5fc1-401e-0067-3a60-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165213Z-1657d5bbd48sdh4cyzadbb374800000001zg00000000s0dp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:13 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:13 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:13 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165213Z-1657d5bbd48tnj6wmberkg2xy800000002c000000000832h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:13 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:13 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:13 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165213Z-1657d5bbd482tlqpvyz9e93p5400000002e0000000001q3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:13 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:13 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:13 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:13 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165213Z-1657d5bbd48dfrdj7px744zp8s00000002200000000074sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:13 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:14 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165214Z-1657d5bbd48cpbzgkvtewk0wu000000002bg00000000anqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:14 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165214Z-1657d5bbd482krtfgrg72dfbtn00000001z000000000g423 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:14 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:14 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165214Z-1657d5bbd48tnj6wmberkg2xy800000002a000000000edew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:14 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:14 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:14 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165214Z-1657d5bbd48brl8we3nu8cxwgn00000002g000000000m5qz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:14 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:14 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:14 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165214Z-1657d5bbd48cpbzgkvtewk0wu000000002ag00000000dxn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:14 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:15 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165215Z-1657d5bbd48wd55zet5pcra0cg000000025g00000000k9eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:15 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165215Z-1657d5bbd48qjg85buwfdynm5w00000002c0000000008xkh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:16 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165216Z-1657d5bbd482lxwq1dp2t1zwkc00000001y000000000mz35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:16 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165216Z-1657d5bbd482lxwq1dp2t1zwkc000000020000000000cnxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:16 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:16 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165216Z-1657d5bbd48xdq5dkwwugdpzr000000002mg000000007wwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:16 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49737	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:16 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 55 45 6e 2f 71 5a 64 63 49 30 61 44 6e 66 34 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 38 61 62 35 64 39 66 32 65 62 65 61 32 36 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: UEn/qZdcI0aDnf4m.1Context: c8ab5d9f2ebea267
2024-10-06 16:52:16 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-06 16:52:16 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 55 45 6e 2f 71 5a 64 63 49 30 61 44 6e 66 34 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 38 61 62 35 64 39 66 32 65 62 65 61 32 36 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 48 4a 36 50 53 47 33 77 76 35 36 79 78 54 45 7a 4c 78 62 56 70 45 41 2f 4c 59 74 68 4d 4c 4e 68 33 34 57 72 6f 36 30 61 43 38 66 45 4a 4f 41 6e 73 58 72 54 69 78 2f 50 4b 59 33 76 76 47 33 30 38 50 43 75 74 73 67 57 69 4c 67 77 4c 5a 4c 57 38 34 37 38 32 39 4d 4c 31 54 67 48 6f 59 53 54 5a 6c 6b 56 79 47 44 79 51 54 4f 73 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: UEn/qZdcI0aDnf4m.2Context: c8ab5d9f2ebea267<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYHJ6PSG3wv56yxTEzLxbVpEA/LYthMLNh34Wro60aC8fEJOAnsXrTix/PKY3vvG308PCutsgWiLgwLZLW847829ML1TgHoYSTZlkVyGDyQTOs
2024-10-06 16:52:16 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 55 45 6e 2f 71 5a 64 63 49 30 61 44 6e 66 34 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 38 61 62 35 64 39 66 32 65 62 65 61 32 36 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: UEn/qZdcI0aDnf4m.3Context: c8ab5d9f2ebea267<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-06 16:52:17 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-06 16:52:17 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 47 6d 45 62 41 6c 43 70 6d 6b 53 55 75 37 63 62 48 33 39 38 31 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: GmEbAlCpmkSUu7cbH3981g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:17 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165217Z-1657d5bbd48brl8we3nu8cxwgn00000002h000000000gmvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:17 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165217Z-1657d5bbd48wd55zet5pcra0cg000000029g000000004fnx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:17 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:17 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165217Z-1657d5bbd48jwrqbupe3ktsx9w00000002d000000000kg3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:17 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:17 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:17 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165217Z-1657d5bbd48vhs7r2p1ky7cs5w00000002k000000000c5ny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:17 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:18 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165218Z-1657d5bbd48cpbzgkvtewk0wu0000000027g00000000rgbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:18 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165218Z-1657d5bbd48cpbzgkvtewk0wu0000000028000000000nvkc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:18 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165218Z-1657d5bbd48tnj6wmberkg2xy8000000028000000000p6ch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:18 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165218Z-1657d5bbd48p2j6x2quer0q02800000002h0000000003ev2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:18 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165218Z-1657d5bbd48p2j6x2quer0q02800000002hg000000002an1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:18 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:18 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165218Z-1657d5bbd48sqtlf1huhzuwq7000000001yg00000000g78p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:19 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:18 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:19 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165219Z-1657d5bbd48vlsxxpe15ac3q7n000000023g00000000r9bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:19 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:19 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165219Z-1657d5bbd48sqtlf1huhzuwq7000000001z000000000fpfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:19 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165219Z-1657d5bbd48xsz2nuzq4vfrzg8000000023g00000000d3p8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:19 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:19 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165219Z-1657d5bbd48brl8we3nu8cxwgn00000002h000000000gmzr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:20 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:19 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165219Z-1657d5bbd48xlwdx82gahegw4000000002bg00000000pm3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:19 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7c825ef0-601e-0001-5f02-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165219Z-1657d5bbd48q6t9vvmrkd293mg000000023000000000s578 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:20 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:20 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165220Z-1657d5bbd482krtfgrg72dfbtn000000023g000000000kxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:20 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:20 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165220Z-1657d5bbd48jwrqbupe3ktsx9w00000002c000000000nuqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:20 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:20 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165220Z-1657d5bbd48qjg85buwfdynm5w000000028000000000pwnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:20 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165220Z-1657d5bbd48xsz2nuzq4vfrzg8000000023000000000fmun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:20 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:20 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165220Z-1657d5bbd48xsz2nuzq4vfrzg800000001zg00000000ur85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:20 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:21 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165221Z-1657d5bbd48xdq5dkwwugdpzr000000002pg000000000cdh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:21 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:21 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165221Z-1657d5bbd48qjg85buwfdynm5w00000002ag00000000e04k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:21 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:21 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:21 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 53f69819-801e-0048-7802-17f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165221Z-1657d5bbd48sdh4cyzadbb3748000000025g000000004pcw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:21 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:21 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1be548a6-001e-00a2-4166-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165221Z-1657d5bbd48lknvp09v995n79000000001u000000000phtz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:21 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165221Z-1657d5bbd48f7nlxc7n5fnfzh000000001y0000000008b0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:22 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:22 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165222Z-1657d5bbd48sqtlf1huhzuwq700000000210000000007um5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:22 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49760	173.222.162.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:22 UTC	2208	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900C4F3 X-BM-CBT: 1696488253 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: 1D6F504B5A5A465DBDB84F31C63A581D X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900C4F3 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshldspcl40,msbdsborgv2co,msbwdsbi920cf,optfsth3,premsbdsbchtupcf,wsbfixcachec,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 516 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=CE2BE0509FF742BD822F50D98AD10391&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&HV=1696488191&IPMH=5767d621&IPMID=1696488252989&LUT=1696487541024; MUID=81C61E09498D41CC97CDBBA354824ED1; _SS=SID=1D9FAF807E686D422B86BC217FC66C71&CPID=1696488253968&AC=1&CPH=071f2185; _EDGE_S=SID=1D9FAF807E686D422B86BC217FC66C71; MUIDB=81C61E09498D41CC97CDBBA354824ED1
2024-10-06 16:52:22 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-06 16:52:22 UTC	515	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 38 31 43 36 31 45 30 39 34 39 38 44 34 31 43 43 39 37 43 44 42 42 41 33 35 34 38 32 34 45 44 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 33 35 31 41 41 38 32 41 45 39 30 43 34 36 36 39 39 46 35 42 31 46 45 33 34 32 42 45 37 45 31 30 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>81C61E09498D41CC97CDBBA354824ED1</CID><Events><E><T>Event.ClientInst</T><IG>351AA82AE90C46699F5B1FE342BE7E10</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-06 16:52:22 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 022B2B52D3D1455DA364A7956ADD64FB Ref B: LAX311000113031 Ref C: 2024-10-06T16:52:22Z Date: Sun, 06 Oct 2024 16:52:22 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.3ca6dc17.1728233542.4047b22e

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:22 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:22 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165222Z-1657d5bbd4824mj9d6vp65b6n400000002gg000000005r2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:22 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:22 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:22 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165222Z-1657d5bbd48p2j6x2quer0q02800000002dg00000000eknq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:22 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:22 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:22 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165222Z-1657d5bbd48cpbzgkvtewk0wu000000002bg00000000ap23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:22 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:22 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165222Z-1657d5bbd48qjg85buwfdynm5w00000002d0000000006b7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:22 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165222Z-1657d5bbd48vlsxxpe15ac3q7n00000002ag000000000nbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:23 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165223Z-1657d5bbd48vlsxxpe15ac3q7n0000000280000000009rka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:23 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165223Z-1657d5bbd482krtfgrg72dfbtn00000001z000000000g4pt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:23 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165223Z-1657d5bbd48lknvp09v995n79000000001s000000000sst8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:23 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165223Z-1657d5bbd48cpbzgkvtewk0wu000000002dg0000000031dk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:23 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165223Z-1657d5bbd48vlsxxpe15ac3q7n00000002ag000000000ndv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:23 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165223Z-1657d5bbd48brl8we3nu8cxwgn00000002n0000000005vtq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:23 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 46a5aa72-701e-0032-6004-17a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165223Z-1657d5bbd48sdh4cyzadbb374800000001zg00000000s0yn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:23 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165223Z-1657d5bbd4824mj9d6vp65b6n400000002eg00000000cxus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:24 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:24 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165224Z-1657d5bbd48xlwdx82gahegw4000000002g00000000070dy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:24 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:24 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:24 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165224Z-1657d5bbd48vlsxxpe15ac3q7n000000023g00000000r9mq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:24 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:24 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165224Z-1657d5bbd48tnj6wmberkg2xy8000000029g00000000gyk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:24 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:24 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165224Z-1657d5bbd487nf59mzf5b3gk8n00000001yg0000000052sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:24 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:24 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:24 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165224Z-1657d5bbd48cpbzgkvtewk0wu0000000028g00000000nkcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:24 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:25 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:26 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165226Z-1657d5bbd487nf59mzf5b3gk8n00000001ug00000000gad6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:26 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:25 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165226Z-1657d5bbd48xlwdx82gahegw4000000002b000000000sqzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:25 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165226Z-1657d5bbd48762wn1qw4s5sd3000000001zg00000000tytv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:26 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:25 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:26 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165226Z-1657d5bbd48xdq5dkwwugdpzr000000002kg00000000ayvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:26 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:26 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165226Z-1657d5bbd482lxwq1dp2t1zwkc00000001x000000000quu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:26 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:26 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 897bc565-f01e-0096-5e60-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165226Z-1657d5bbd482tlqpvyz9e93p54000000028000000000nf8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:27 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:26 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165226Z-1657d5bbd48sdh4cyzadbb3748000000023000000000bwx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:26 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165226Z-1657d5bbd48gqrfwecymhhbfm8000000012g00000000d4p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:27 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:26 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165226Z-1657d5bbd48vhs7r2p1ky7cs5w00000002ng000000003v0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:26 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165226Z-1657d5bbd48tnj6wmberkg2xy8000000027g00000000qnsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:27 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3c7823fd-401e-0015-0c60-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165227Z-1657d5bbd48xsz2nuzq4vfrzg8000000022g00000000hkch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:27 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165227Z-1657d5bbd48tnj6wmberkg2xy8000000028g00000000ncuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:27 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165227Z-1657d5bbd4824mj9d6vp65b6n400000002b000000000sfxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:27 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:27 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165227Z-1657d5bbd48xlwdx82gahegw4000000002hg000000001fk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:27 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:27 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:27 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165227Z-1657d5bbd48sqtlf1huhzuwq70000000020000000000atg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:27 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:28 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:28 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:28 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165228Z-1657d5bbd48wd55zet5pcra0cg000000029g000000004g20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:28 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:28 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:28 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165228Z-1657d5bbd48vhs7r2p1ky7cs5w00000002f000000000qw41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:28 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:28 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:28 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165228Z-1657d5bbd482lxwq1dp2t1zwkc000000021g00000000816b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:28 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:28 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:28 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:28 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165228Z-1657d5bbd48vlsxxpe15ac3q7n00000002ag000000000nr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:28 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:28 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:28 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:28 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165228Z-1657d5bbd48t66tjar5xuq22r800000002a00000000037b3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:28 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:29 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:29 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165229Z-1657d5bbd48vhs7r2p1ky7cs5w00000002f000000000qw59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:29 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:29 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:29 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165229Z-1657d5bbd48xdq5dkwwugdpzr000000002m0000000009qsx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:29 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:29 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:29 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165229Z-1657d5bbd48f7nlxc7n5fnfzh000000001vg00000000gg5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:29 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:29 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:29 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165229Z-1657d5bbd48vhs7r2p1ky7cs5w00000002p000000000296e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:29 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:29 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:29 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:29 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165229Z-1657d5bbd48xlwdx82gahegw4000000002dg00000000fw0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:29 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:30 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165230Z-1657d5bbd48xdq5dkwwugdpzr000000002gg00000000mazr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:30 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:30 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165230Z-1657d5bbd48p2j6x2quer0q02800000002d000000000g17d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:30 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 03c3f781-101e-000b-56fe-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165230Z-1657d5bbd48tnj6wmberkg2xy8000000026g00000000ua2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:30 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:30 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165230Z-1657d5bbd48p2j6x2quer0q02800000002bg00000000nc6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:30 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:30 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:30 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:30 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165230Z-1657d5bbd48tqvfc1ysmtbdrg0000000026g000000002yt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:31 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:31 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165231Z-1657d5bbd48f7nlxc7n5fnfzh000000001u000000000nr01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:31 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:31 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:31 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165231Z-1657d5bbd48q6t9vvmrkd293mg0000000290000000006b04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:31 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:31 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:31 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165231Z-1657d5bbd48wd55zet5pcra0cg00000002a0000000002mmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:31 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:31 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165231Z-1657d5bbd48cpbzgkvtewk0wu000000002ag00000000dy87 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:31 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:31 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: c7b66cba-b01e-005c-04ff-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165231Z-1657d5bbd4824mj9d6vp65b6n400000002hg000000002aee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49822	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:32 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 71 43 30 73 34 75 36 41 33 55 69 62 31 37 70 75 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 63 30 65 65 39 66 62 61 38 38 31 32 64 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: qC0s4u6A3Uib17pu.1Context: 8dc0ee9fba8812d9
2024-10-06 16:52:32 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-06 16:52:32 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 71 43 30 73 34 75 36 41 33 55 69 62 31 37 70 75 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 63 30 65 65 39 66 62 61 38 38 31 32 64 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 48 4a 36 50 53 47 33 77 76 35 36 79 78 54 45 7a 4c 78 62 56 70 45 41 2f 4c 59 74 68 4d 4c 4e 68 33 34 57 72 6f 36 30 61 43 38 66 45 4a 4f 41 6e 73 58 72 54 69 78 2f 50 4b 59 33 76 76 47 33 30 38 50 43 75 74 73 67 57 69 4c 67 77 4c 5a 4c 57 38 34 37 38 32 39 4d 4c 31 54 67 48 6f 59 53 54 5a 6c 6b 56 79 47 44 79 51 54 4f 73 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: qC0s4u6A3Uib17pu.2Context: 8dc0ee9fba8812d9<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYHJ6PSG3wv56yxTEzLxbVpEA/LYthMLNh34Wro60aC8fEJOAnsXrTix/PKY3vvG308PCutsgWiLgwLZLW847829ML1TgHoYSTZlkVyGDyQTOs
2024-10-06 16:52:32 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 71 43 30 73 34 75 36 41 33 55 69 62 31 37 70 75 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 63 30 65 65 39 66 62 61 38 38 31 32 64 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: qC0s4u6A3Uib17pu.3Context: 8dc0ee9fba8812d9<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-06 16:52:32 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-06 16:52:32 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 7a 6b 35 49 6e 37 65 59 35 45 6d 4f 55 50 37 2f 37 65 53 34 2b 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: zk5In7eY5EmOUP7/7eS4+A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:32 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165232Z-1657d5bbd482krtfgrg72dfbtn00000001zg00000000dy2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:32 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165232Z-1657d5bbd48xsz2nuzq4vfrzg8000000022g00000000hknh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49825	13.107.246.45	443	1036	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:32 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165232Z-1657d5bbd48dfrdj7px744zp8s00000001yg00000000kd0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:32 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fcca05a5-501e-00a0-3202-179d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165232Z-1657d5bbd48p2j6x2quer0q02800000002d000000000g1ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:32 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165232Z-1657d5bbd48jwrqbupe3ktsx9w00000002hg000000002a6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:32 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:33 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165233Z-1657d5bbd48brl8we3nu8cxwgn00000002ng0000000043pc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:33 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:32 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fbb49b00-e01e-00aa-4806-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165233Z-1657d5bbd48q6t9vvmrkd293mg000000026000000000gs3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:32 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 77012b0e-b01e-0097-0bff-164f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165233Z-1657d5bbd4824mj9d6vp65b6n400000002h0000000004dwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:32 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:33 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165233Z-1657d5bbd48p2j6x2quer0q02800000002g0000000007947 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:33 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:52:33 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 16:52:33 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 16:52:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T165233Z-1657d5bbd48cpbzgkvtewk0wu000000002e0000000001nek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 16:52:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Target ID:	0
Start time:	12:52:02
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:52:06
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2240,i,6857383791472899497,15531192649493710921,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:52:09
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-nwwypi.xyz/update/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: us-usps-nwwypi.xyz
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-nwwypi.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-nwwypi.xyz
Source:	DNS query: us-usps-nwwypi.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-nwwypi.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-nwwypi.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-nwwypi.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-nwwypi.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-nwwypi.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-nwwypi.xyz
Source:	DNS query: us-usps-nwwypi.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://us-usps-nwwypi.xyz/update/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3708, Parent PID: 6964

General

Chronological Activities

Analysis Process: chrome.exePID: 1036, Parent PID: 3708

General

Chronological Activities

Analysis Process: chrome.exePID: 2876, Parent PID: 6964

General

Chronological Activities

Disassembly

Windows Analysis Report
https://us-usps-nwwypi.xyz/update/