Edit tour

Windows Analysis Report
http://daddyrdp.com

Overview

General Information

Sample URL:	http://daddyrdp.com
Analysis ID:	1528797
Infos:

Errors URL not reachable

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 280 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 --field-trial-handle=2244,i,18367794271105989800,11067129047863455329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://daddyrdp.com" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:58648 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.6:51705 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:58635 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: daddyrdp.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51707
Source: unknown	Network traffic detected: HTTP traffic on port 58650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51713
Source: unknown	Network traffic detected: HTTP traffic on port 51714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51712
Source: unknown	Network traffic detected: HTTP traffic on port 58655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51710
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 51713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 51707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 58645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 51709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58659
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58658
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58657
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58665
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58664
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58660
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 58651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 51710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58666
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 58646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58638
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58639
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58636
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58641
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58643
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58642
Source: unknown	Network traffic detected: HTTP traffic on port 58636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 58653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58648
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58645
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58647
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58652
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58654
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58650
Source: unknown	Network traffic detected: HTTP traffic on port 58642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:58648 version: TLS 1.2

Source: classification engine

Classification label: unknown0.win@19/0@12/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 --field-trial-handle=2244,i,18367794271105989800,11067129047863455329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://daddyrdp.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 --field-trial-handle=2244,i,18367794271105989800,11067129047863455329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://daddyrdp.com	2%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
www.google.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
google.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
daddyrdp.com	2%	Virustotal	Browse

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
google.com	142.250.186.46	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.164	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
daddyrdp.com	unknown	unknown	false	2%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
142.250.186.164	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528797
Start date and time:	2024-10-08 10:01:25 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 1m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://daddyrdp.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	UNKNOWN
Classification:	unknown0.win@19/0@12/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	URL browsing timeout or error

Errors

URL not reachable

Warnings

Exclude process from analysis (whitelisted): SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.186.78, 173.194.76.84, 34.104.35.123, 184.28.90.27, 4.175.87.197, 192.229.221.95, 52.165.164.15, 199.232.214.172, 13.85.23.206, 13.95.31.18
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 10:02:12.577564001 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 8, 2024 10:02:12.577564001 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 8, 2024 10:02:12.874475956 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 8, 2024 10:02:19.694673061 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:19.694719076 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:19.694787979 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:19.695333958 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:19.695348978 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:20.512968063 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:20.513039112 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:20.534390926 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:20.534404039 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:20.534591913 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:20.554282904 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:20.554361105 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:20.554364920 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:20.554514885 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:20.599401951 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:20.728745937 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:20.728833914 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:20.728905916 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:20.729119062 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:20.729136944 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:22.185045004 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 8, 2024 10:02:22.185240984 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 8, 2024 10:02:22.484651089 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 8, 2024 10:02:23.122056961 CEST	49718	443	192.168.2.6	142.250.186.164
Oct 8, 2024 10:02:23.122107983 CEST	443	49718	142.250.186.164	192.168.2.6
Oct 8, 2024 10:02:23.122184992 CEST	49718	443	192.168.2.6	142.250.186.164
Oct 8, 2024 10:02:23.122920990 CEST	49718	443	192.168.2.6	142.250.186.164
Oct 8, 2024 10:02:23.122942924 CEST	443	49718	142.250.186.164	192.168.2.6
Oct 8, 2024 10:02:23.307559967 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:23.307616949 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:23.307743073 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:23.308445930 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:23.308464050 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:23.760754108 CEST	443	49718	142.250.186.164	192.168.2.6
Oct 8, 2024 10:02:23.761677027 CEST	49718	443	192.168.2.6	142.250.186.164
Oct 8, 2024 10:02:23.761755943 CEST	443	49718	142.250.186.164	192.168.2.6
Oct 8, 2024 10:02:23.763200045 CEST	443	49718	142.250.186.164	192.168.2.6
Oct 8, 2024 10:02:23.763310909 CEST	49718	443	192.168.2.6	142.250.186.164
Oct 8, 2024 10:02:23.770160913 CEST	49718	443	192.168.2.6	142.250.186.164
Oct 8, 2024 10:02:23.770308018 CEST	443	49718	142.250.186.164	192.168.2.6
Oct 8, 2024 10:02:23.810205936 CEST	49718	443	192.168.2.6	142.250.186.164
Oct 8, 2024 10:02:23.810230017 CEST	443	49718	142.250.186.164	192.168.2.6
Oct 8, 2024 10:02:23.857104063 CEST	49718	443	192.168.2.6	142.250.186.164
Oct 8, 2024 10:02:23.966197014 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:23.966283083 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:23.970309973 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:23.970328093 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:23.970608950 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.004224062 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.051399946 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.105623007 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.105648041 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.105679989 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.105690002 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.105731964 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.105783939 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.105798006 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.105842113 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.126616001 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 8, 2024 10:02:24.126698971 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 8, 2024 10:02:24.192698002 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.192707062 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.192796946 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.192823887 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.192888975 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.194675922 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.194698095 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.194766998 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.194775105 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.194820881 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.280771017 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.280793905 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.280875921 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.280905008 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.280985117 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.281598091 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.281614065 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.281667948 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.281677008 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.281716108 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.281739950 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.282561064 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.282577038 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.282660007 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.282669067 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.282841921 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.284029007 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.284044981 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.284111977 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.284120083 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.284245968 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.369354963 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.369373083 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.369465113 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.369496107 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.369585037 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.370115042 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.370131969 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.370198965 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.370213985 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.370275974 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.370599031 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.370620966 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.370707989 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.370722055 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.370796919 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.371505976 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.371524096 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.371573925 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.371587992 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.371618986 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.371639967 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.372256994 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.372272015 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.372349024 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.372363091 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.372447968 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.373207092 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.373223066 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.373289108 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.373292923 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.373306990 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.373332024 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.373374939 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.373380899 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.373452902 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.373506069 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.373536110 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.373558044 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.373579979 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.373589039 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.627237082 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.627279997 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.627331972 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.629029036 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.629036903 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.629120111 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.631905079 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.631942034 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.632024050 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.637962103 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.638003111 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.638113976 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.640218019 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.640243053 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.640296936 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.643059015 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.643074036 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.643172979 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.643182993 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.643244028 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.643260002 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.643451929 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.643461943 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:24.655317068 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:24.655333996 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.294011116 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.294590950 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.294632912 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.295082092 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.295088053 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.297781944 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.298250914 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.298261881 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.298712969 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.298716068 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.310652018 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.310906887 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.311000109 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.311033010 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.311340094 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.311346054 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.311613083 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.311625957 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.312042952 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.312050104 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.332880974 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.333276987 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.333313942 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.333777905 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.333785057 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.395180941 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.395265102 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.395409107 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.395587921 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.395606995 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.395618916 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.395625114 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.397881985 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.397927999 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.397989035 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.398041964 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.398653030 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.398680925 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.398747921 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.398910046 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.398916960 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.398947954 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.398952007 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.399482965 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.399493933 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.400964975 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.401017904 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.401087046 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.401243925 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.401259899 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.410985947 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.411066055 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.411137104 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.411149025 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.411191940 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.411220074 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.411303997 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.411303997 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.411329985 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.411340952 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.412360907 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.412381887 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.412441969 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.412451982 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.412487984 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.412494898 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.412534952 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.412611008 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.412616014 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.412623882 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.412630081 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.413472891 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.413491011 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.413641930 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.413856983 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.413871050 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.414370060 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.414376974 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.414477110 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.414577007 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.414588928 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.435477018 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.435619116 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.435713053 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.435832024 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.435846090 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.435854912 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.435859919 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.438035965 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.438050985 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:25.438143969 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.438329935 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:25.438343048 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.033461094 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.034229040 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.034240007 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.042758942 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.042763948 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.059552908 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.060347080 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.060374975 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.061384916 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.061587095 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.061594009 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.062482119 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.062489033 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.063453913 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.063458920 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.078938961 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.079319954 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.079329014 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.079925060 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.079930067 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.086175919 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.086616993 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.086626053 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.087349892 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.087354898 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.139046907 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.139107943 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.139267921 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.139405012 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.139410973 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.142390966 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.142419100 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.142519951 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.143008947 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.143021107 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.170635939 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.170787096 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.170850992 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.171044111 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.171060085 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.171345949 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.171453953 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.171502113 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.172624111 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.172627926 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.178092957 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.178137064 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.178206921 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.181112051 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.181122065 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.181291103 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.181471109 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.181493044 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.181662083 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.181675911 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.185450077 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.185487986 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.185672998 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.185842037 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.185856104 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.185864925 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.185868979 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.186410904 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.187071085 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.187117100 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.187146902 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.187153101 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.187191963 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.187196970 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.193131924 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.193147898 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.193216085 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.193705082 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.193716049 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.197233915 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.197267056 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.197415113 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.197807074 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.197823048 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.868354082 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.868885994 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.868896008 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.869357109 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.869360924 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.907634974 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.908065081 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.908082962 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.908495903 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.908504009 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.908678055 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.908952951 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.908963919 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.909425974 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.909430981 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.924434900 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.924838066 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.924858093 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.925267935 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.925272942 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.956517935 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.956978083 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.956990004 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.957397938 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.957406044 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.967678070 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.967740059 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.967925072 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.967984915 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.967999935 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.968054056 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.968060970 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.971702099 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.971740961 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:26.971935987 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.972134113 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:26.972143888 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.007137060 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.007324934 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.007591963 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.007592916 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.007685900 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.007728100 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.010065079 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.010123968 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.010279894 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.010582924 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.010601997 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.010612011 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.010617018 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.010715961 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.010757923 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.010833025 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.011229038 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.011254072 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.013187885 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.013214111 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.013442993 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.013813972 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.013828993 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.028924942 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.029074907 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.029130936 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.030003071 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.030015945 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.030047894 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.030055046 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.037117958 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.037148952 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.037409067 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.038474083 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.038491011 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.064287901 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.064348936 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.064496040 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.064527988 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.064541101 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.067759037 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.067843914 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.067923069 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.068083048 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.068116903 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.617497921 CEST	49742	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:27.617544889 CEST	443	49742	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:27.618021011 CEST	49742	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:27.618546963 CEST	49742	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:27.618557930 CEST	443	49742	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:27.621840954 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.623507977 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.623577118 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.624161959 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.624176025 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.660470963 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.665230036 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.665230036 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.665258884 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.665261984 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.673424959 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.673845053 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.673882961 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.674185038 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.674199104 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.692584038 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.704988956 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.720537901 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.720602036 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.720671892 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.728828907 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.728890896 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.729523897 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.729537964 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.730093002 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.730149984 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.730458975 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.730472088 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.730684042 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.730720043 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.730757952 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.730777979 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.735023022 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.735085964 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.735174894 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.735399961 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.735435963 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.760847092 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.760977983 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.761164904 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.778212070 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.778283119 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.778341055 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.799415112 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.799432039 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.800777912 CEST	49738	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.800851107 CEST	443	49738	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.803136110 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.803165913 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.803239107 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.803685904 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.803702116 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.805119991 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.805157900 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.805222034 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.805321932 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.805330992 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.825445890 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.825510979 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.825603008 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.826378107 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.826448917 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.826528072 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.826656103 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.826674938 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.826689005 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.826695919 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.827780008 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.827796936 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.829925060 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.829940081 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.830131054 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.831556082 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.831588984 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.831707954 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.831864119 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.831877947 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:27.832046986 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:27.832061052 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.404875994 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.405417919 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.405452967 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.406029940 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.406042099 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.416881084 CEST	443	49742	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:28.416968107 CEST	49742	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:28.420604944 CEST	49742	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:28.420615911 CEST	443	49742	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:28.421021938 CEST	443	49742	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:28.422426939 CEST	49742	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:28.422625065 CEST	49742	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:28.422633886 CEST	443	49742	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:28.422797918 CEST	49742	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:28.442321062 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.442764044 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.442790031 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.443217993 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.443227053 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.455286980 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.455652952 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.455668926 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.456121922 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.456125975 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.467403889 CEST	443	49742	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:28.502065897 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.502542973 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.502583027 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.502962112 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.502969027 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.506999016 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.507404089 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.507417917 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.507771015 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.507775068 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.507945061 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.508018017 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.508184910 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.508228064 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.508249998 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.508285999 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.508295059 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.511077881 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.511135101 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.511239052 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.511440039 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.511460066 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.542186975 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.542252064 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.542313099 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.542490959 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.542505980 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.542551041 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.542556047 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.545124054 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.545166016 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.545258999 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.545825958 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.545846939 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.556417942 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.556588888 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.556658030 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.556766987 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.556780100 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.556790113 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.556794882 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.559683084 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.559712887 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.559973955 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.560137033 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.560142994 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.593219995 CEST	443	49742	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:28.593431950 CEST	443	49742	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:28.593506098 CEST	49742	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:28.593650103 CEST	49742	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:28.593672037 CEST	443	49742	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:28.604805946 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.604955912 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.605026960 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.605134964 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.605149031 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.605156898 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.605161905 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.607825994 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.607876062 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.607959032 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.608074903 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.608091116 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.612265110 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.612340927 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.612387896 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.612530947 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.612543106 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.612551928 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.612556934 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.614664078 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.614758968 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:28.615040064 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.615215063 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:28.615252018 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.173870087 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.174493074 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.174536943 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.175081968 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.175090075 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.186392069 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.186983109 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.186996937 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.187571049 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.187577009 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.217165947 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.217628002 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.217636108 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.218302011 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.218306065 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.260792017 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.261972904 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.261972904 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.262037039 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.262083054 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.264477968 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.264899969 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.264938116 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.265434027 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.265441895 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.280304909 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.280391932 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.280555010 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.280599117 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.280626059 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.280643940 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.280652046 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.284281015 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.284324884 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.284742117 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.284742117 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.284776926 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.285422087 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.285480022 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.285595894 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.285737991 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.285761118 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.285773993 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.285782099 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.288572073 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.288605928 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.288702965 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.288851976 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.288871050 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.317601919 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.317770004 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.317856073 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.317923069 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.317939043 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.317949057 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.317955971 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.320555925 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.320621967 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.320808887 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.320899963 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.320916891 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.359220982 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.359309912 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.359524012 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.359746933 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.359783888 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.359808922 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.359822035 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.362587929 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.362749100 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.362867117 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.363342047 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.363380909 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.363401890 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.363414049 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.373007059 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.373050928 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.373171091 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.373574018 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.373588085 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.373651981 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.373682976 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.373826027 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.373955011 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.373974085 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.934261084 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.934834003 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.934906960 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.935430050 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.935444117 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.945903063 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.946388006 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.946408987 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.947031021 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.947041988 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.988418102 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.988908052 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.988938093 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:29.989459991 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:29.989470959 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.012259960 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.012697935 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.012717962 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.013303041 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.013309002 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.026019096 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.027415037 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.027415037 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.027436018 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.027446032 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.032747984 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.032802105 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.032881021 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.033407927 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.033451080 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.033477068 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.033493996 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.038554907 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.038604021 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.039414883 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.039414883 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.039450884 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.047426939 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.047518969 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.047705889 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.047925949 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.047954082 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.059187889 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.059226036 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.059290886 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.059479952 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.059490919 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.092195988 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.092364073 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.092510939 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.092581987 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.092605114 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.092619896 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.092627048 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.095637083 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.095664024 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.095892906 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.096190929 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.096200943 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.111627102 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.111701012 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.111843109 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.111867905 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.111876965 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.111890078 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.111893892 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.114667892 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.114720106 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.114845037 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.115410089 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.115428925 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.126519918 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.126918077 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.127021074 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.127021074 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.127223015 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.127237082 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.129801989 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.129821062 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.129901886 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.130198002 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.130213976 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.619530916 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.620528936 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.620552063 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.620788097 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.620791912 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.672629118 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.673665047 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.673665047 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.673685074 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.673697948 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.718985081 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.719069004 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.719244957 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.719598055 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.719614029 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.719641924 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.719646931 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.722922087 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.722945929 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.723149061 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.723401070 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.723413944 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.751662016 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.752512932 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.752535105 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.752943039 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.752953053 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.772417068 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.772478104 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.772762060 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.772850990 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.772867918 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.772907019 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.772912025 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.776146889 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.776237011 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.776525021 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.776525021 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.776602983 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.780328989 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.780998945 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.781009912 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.781358957 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.781363964 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.785377026 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.786257029 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.786257029 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.786273003 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.786286116 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.851093054 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.851142883 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.851243019 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.851445913 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.851445913 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.851460934 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.851469040 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.854600906 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.854700089 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.854912043 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.854979992 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.854998112 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.882222891 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.882301092 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.882611990 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.882611990 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.882611990 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.885031939 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.885059118 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.885296106 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.885296106 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.885344028 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.890547991 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.890626907 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.890753984 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.890877008 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.890877008 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.890896082 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.890909910 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.893177032 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.893260002 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:30.893469095 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.893553972 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:30.893575907 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.185866117 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.185904026 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.375761986 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.376367092 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.376403093 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.376987934 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.377000093 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.438313961 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.438818932 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.438846111 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.439493895 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.439500093 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.475497007 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.475589037 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.475887060 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.475887060 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.476109028 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.476130962 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.480659962 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.480706930 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.480956078 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.481101990 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.481118917 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.503860950 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.504723072 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.504723072 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.504756927 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.504780054 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.542870998 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.542927027 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.543196917 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.543246984 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.543344975 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.543344975 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.543409109 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.543437004 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.545300961 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.545330048 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.545824051 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.545836926 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.547961950 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.548003912 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.548732042 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.549767971 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.549786091 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.561121941 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.561547041 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.561575890 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.562036037 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.562047958 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.604912996 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.604978085 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.605292082 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.605365038 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.605365038 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.605407953 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.605433941 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.612087965 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.612128019 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.612380028 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.614815950 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.614839077 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.641290903 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.641441107 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.641947985 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.642088890 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.642107010 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.642124891 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.642132998 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.647010088 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.647058964 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.647310972 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.647412062 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.647418976 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.663882971 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.663964033 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.664035082 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.664261103 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.664308071 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.664339066 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.664355993 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.668697119 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.668730974 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:31.669233084 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.669641972 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:31.669657946 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.123183012 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.128544092 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.128578901 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.128659964 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.128664970 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.216892004 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.217665911 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.217693090 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.218624115 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.218631029 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.228849888 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.228944063 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.229022026 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.229280949 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.229300976 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.229338884 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.229346037 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.234842062 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.234877110 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.234951019 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.235193014 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.235207081 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.264327049 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.265264988 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.265278101 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.266618967 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.266624928 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.305278063 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.306335926 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.306382895 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.307015896 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.307022095 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.319479942 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.319822073 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.319865942 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.320288897 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.320297003 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.321145058 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.321207047 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.321408033 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.321557045 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.321577072 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.324511051 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.324539900 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.324640036 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.324867010 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.324877977 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.609777927 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.609852076 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.609899998 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.610030890 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.610047102 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.610055923 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.610060930 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.610357046 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.610524893 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.610547066 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.610600948 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.610604048 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.610688925 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.610779047 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.610804081 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.610820055 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.610827923 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.611247063 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.611268044 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.611278057 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.611284018 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.613560915 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.613586903 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.613734007 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.614306927 CEST	49776	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.614399910 CEST	443	49776	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.614420891 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.614439011 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.614479065 CEST	49776	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.614540100 CEST	49776	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.614563942 CEST	443	49776	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.614609003 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.614648104 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.614712954 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.614870071 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.614886045 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.882576942 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.884716988 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.884716988 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.884738922 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.884751081 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.969223976 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.970242977 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.970266104 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.970793009 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.970808983 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.983112097 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.983190060 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:32.983278036 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.983645916 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:32.983660936 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.044207096 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.044281960 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.044392109 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.045286894 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.045356989 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.071644068 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.071695089 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.071783066 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.072350025 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.072350025 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.072362900 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.072370052 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.077337027 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.077375889 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.077456951 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.077673912 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.077689886 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.257752895 CEST	443	49776	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.258517981 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.262806892 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.267946005 CEST	49776	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.268009901 CEST	443	49776	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.268913031 CEST	49776	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.268928051 CEST	443	49776	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.269299984 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.269321918 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.269893885 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.269900084 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.270443916 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.270472050 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.271100998 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.271106005 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.368077040 CEST	443	49776	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.368247986 CEST	443	49776	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.368321896 CEST	49776	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.368829012 CEST	49776	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.368870974 CEST	443	49776	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.368897915 CEST	49776	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.368912935 CEST	443	49776	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.370289087 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.370351076 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.370408058 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.370625973 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.370646954 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.370656013 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.370661020 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.374342918 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.374381065 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.374516964 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.376600981 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.376621962 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.376740932 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.377007008 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.377021074 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.377283096 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.377293110 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.397624016 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.397782087 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.397847891 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.398006916 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.398020983 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.401828051 CEST	49783	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.401866913 CEST	443	49783	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.401920080 CEST	49783	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.402057886 CEST	49783	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.402072906 CEST	443	49783	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.712455988 CEST	443	49718	142.250.186.164	192.168.2.6
Oct 8, 2024 10:02:33.712619066 CEST	443	49718	142.250.186.164	192.168.2.6
Oct 8, 2024 10:02:33.712692976 CEST	49718	443	192.168.2.6	142.250.186.164
Oct 8, 2024 10:02:33.761671066 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.762217045 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.762243032 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.762679100 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.762684107 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.983346939 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.983603954 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.983668089 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.983711004 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.983711004 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.983731985 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.983741045 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.985335112 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.985670090 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.985719919 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.986052990 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.986059904 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.986175060 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.986215115 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:33.986356020 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.986463070 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:33.986474991 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.281510115 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.281600952 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.281658888 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.290101051 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.290122986 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.330384970 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.330420017 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.330622911 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.330980062 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.330991983 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.370878935 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.371717930 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.371745110 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.372672081 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.372677088 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.374300003 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.374659061 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.374665976 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.375407934 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.375411034 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.381302118 CEST	443	49783	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.381885052 CEST	49783	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.381917000 CEST	443	49783	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.382759094 CEST	49783	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.382766008 CEST	443	49783	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.472599030 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.472671032 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.472780943 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.473167896 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.473200083 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.473215103 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.473222971 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.473937988 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.474092007 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.474154949 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.474900007 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.474905968 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.479619980 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.479665041 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.480032921 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.485519886 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.485533953 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.486299992 CEST	443	49783	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.486449003 CEST	443	49783	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.486509085 CEST	49783	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.487627029 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.487679958 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.487757921 CEST	49783	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.487787008 CEST	443	49783	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.487790108 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.487811089 CEST	49783	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.487819910 CEST	443	49783	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.488104105 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.488122940 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.491938114 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.491949081 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.492180109 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.492399931 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.492414951 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.826941967 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.827476978 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.827514887 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.828028917 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.828037024 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.926522970 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.926708937 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.926774979 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.926986933 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.927000999 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.930315971 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.930357933 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.930824041 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.931184053 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.931195974 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.968898058 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.969840050 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.969865084 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:34.970736980 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:34.970741987 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.068634987 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.068725109 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.068775892 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.068936110 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.068954945 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.068967104 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.068973064 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.071770906 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.071835995 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.071949959 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.072109938 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.072127104 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.138731956 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.139401913 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.139455080 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.139729023 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.139925957 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.139933109 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.140036106 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.140044928 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.140368938 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.140373945 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.149231911 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.150074959 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.150074959 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.150095940 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.150122881 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.239988089 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.240139008 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.240205050 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.240278006 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.240305901 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.240324020 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.240330935 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.243031979 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.243084908 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.243175983 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.243346930 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.243366957 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.252551079 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.252599001 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.252687931 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.252999067 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.252999067 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.253021955 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.253034115 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.255023003 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.255059958 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.255120039 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.255253077 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.255264044 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.354573011 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.354635954 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.354774952 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.354815960 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.354815960 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.354836941 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.354847908 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.357043028 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.357136011 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.357217073 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.357347965 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.357383013 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.584533930 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.585112095 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.585135937 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.586760998 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.586766005 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.634507895 CEST	49718	443	192.168.2.6	142.250.186.164
Oct 8, 2024 10:02:35.634526014 CEST	443	49718	142.250.186.164	192.168.2.6
Oct 8, 2024 10:02:35.685678005 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.685878038 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.687540054 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.688520908 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.688535929 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.688548088 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.688553095 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.690901995 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.690947056 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.691123009 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.692089081 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.692100048 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.724674940 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.735203028 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.735238075 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.737174988 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.737183094 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.864898920 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.864974976 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.865055084 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.878305912 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.878336906 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.878354073 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.878361940 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.883646011 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.883672953 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.883721113 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.884012938 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.884026051 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.924468994 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.928109884 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.928143024 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.928493023 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.928502083 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.931422949 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.931731939 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.931762934 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:35.932163954 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:35.932168961 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.020195961 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.026967049 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.027132034 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.027196884 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.036329985 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.036406040 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.036474943 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.060739994 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.072128057 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.072149038 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.072592020 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.072597980 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.072849035 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.072890997 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.072913885 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.072922945 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.074237108 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.074259996 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.089958906 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.089987040 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.090066910 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.090392113 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.090403080 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.093009949 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.093060017 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.093117952 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.093466997 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.093487024 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.169151068 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.169224977 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.169373989 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.169405937 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.169420004 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.169433117 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.169440985 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.171647072 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.171684027 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.171775103 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.172017097 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.172030926 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.376873016 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.377450943 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.377521992 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.377878904 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.377895117 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.481781006 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.481878996 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.481962919 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.482116938 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.482160091 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.482188940 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.482203960 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.484602928 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.484646082 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.484700918 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.484862089 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.484882116 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.523967981 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.524395943 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.524430990 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.524822950 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.524830103 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.625968933 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.626077890 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.626153946 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.626318932 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.626363039 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.626477957 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.626496077 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.629508972 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.629575968 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.629719973 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.629952908 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.629993916 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.630505085 CEST	51705	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:36.635272026 CEST	53	51705	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:36.635339975 CEST	51705	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:36.635418892 CEST	51705	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:36.640348911 CEST	53	51705	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:36.728161097 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.728724957 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.728759050 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.729353905 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.729381084 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.759409904 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.759953976 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.759998083 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.760406017 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.760411978 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.826769114 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.826831102 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.827024937 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.827125072 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.827145100 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.827157974 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.827166080 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.828104973 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.828553915 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.828572989 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.828994989 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.828999996 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.830547094 CEST	51706	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.830571890 CEST	443	51706	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.830646992 CEST	51706	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.830766916 CEST	51706	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.830776930 CEST	443	51706	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.863380909 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.863554955 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.863651037 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.863688946 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.863709927 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.863723993 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.863730907 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.866599083 CEST	51707	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.866628885 CEST	443	51707	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.866931915 CEST	51707	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.867119074 CEST	51707	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.867136002 CEST	443	51707	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.928826094 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.928889990 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.928937912 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.929127932 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.929161072 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.929173946 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.929182053 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.932281017 CEST	51708	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.932327986 CEST	443	51708	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:36.932503939 CEST	51708	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.932725906 CEST	51708	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:36.932744980 CEST	443	51708	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.099277973 CEST	53	51705	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:37.100038052 CEST	51705	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:37.105727911 CEST	53	51705	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:37.105878115 CEST	51705	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:37.146892071 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.147394896 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.147414923 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.148035049 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.148042917 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.250133038 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.250149965 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.250206947 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.250231028 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.250338078 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.250622988 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.250647068 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.251401901 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.251409054 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.254081964 CEST	51709	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.254129887 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.254473925 CEST	51709	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.254658937 CEST	51709	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.254673004 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.293617964 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.294785976 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.294785976 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.294814110 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.294836998 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.396848917 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.396986008 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.397309065 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.397419930 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.397419930 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.397447109 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.397453070 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.400445938 CEST	51710	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.400501966 CEST	443	51710	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.400604963 CEST	51710	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.400768042 CEST	51710	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.400783062 CEST	443	51710	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.478379965 CEST	443	51706	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.479011059 CEST	51706	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.479028940 CEST	443	51706	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.480513096 CEST	51706	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.480520010 CEST	443	51706	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.541704893 CEST	443	51707	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.542603970 CEST	51707	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.542625904 CEST	443	51707	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.542716980 CEST	51707	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.542721987 CEST	443	51707	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.791476965 CEST	443	51706	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.791531086 CEST	443	51706	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.791640043 CEST	51706	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.791822910 CEST	51706	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.791846037 CEST	443	51706	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.791862011 CEST	51706	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.791868925 CEST	443	51706	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.793236017 CEST	443	51708	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.793765068 CEST	51708	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.793792963 CEST	443	51708	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.794342995 CEST	51708	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.794348955 CEST	443	51708	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.794980049 CEST	51711	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.795017004 CEST	443	51711	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.795238972 CEST	51711	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.795550108 CEST	51711	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.795566082 CEST	443	51711	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.888855934 CEST	443	51707	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.888885021 CEST	443	51707	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.888948917 CEST	443	51707	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.889123917 CEST	51707	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.889123917 CEST	51707	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.889312029 CEST	51707	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.889312029 CEST	51707	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.889324903 CEST	443	51707	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.889333963 CEST	443	51707	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.892307043 CEST	51712	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.892335892 CEST	443	51708	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.892343998 CEST	443	51712	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.892359018 CEST	443	51708	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.892431021 CEST	51712	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.892435074 CEST	443	51708	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.892469883 CEST	51708	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.892520905 CEST	51708	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.892658949 CEST	51708	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.892683029 CEST	443	51708	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.892683983 CEST	51712	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.892698050 CEST	51708	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.892700911 CEST	443	51712	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.892704964 CEST	443	51708	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.895299911 CEST	51713	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.895340919 CEST	443	51713	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.895412922 CEST	51713	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.895570993 CEST	51713	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.895582914 CEST	443	51713	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.976084948 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.976660967 CEST	51709	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.976694107 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:37.977339983 CEST	51709	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:37.977351904 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.053865910 CEST	443	51710	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.054493904 CEST	51710	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.054533005 CEST	443	51710	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.055151939 CEST	51710	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.055162907 CEST	443	51710	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.075588942 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.075651884 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.075889111 CEST	51709	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.075925112 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.075948954 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.076000929 CEST	51709	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.076064110 CEST	51709	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.076082945 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.076095104 CEST	51709	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.076102018 CEST	443	51709	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.079092026 CEST	51714	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.079133987 CEST	443	51714	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.079226971 CEST	51714	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.079410076 CEST	51714	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.079422951 CEST	443	51714	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.099853992 CEST	58635	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:38.104939938 CEST	53	58635	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:38.105053902 CEST	58635	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:38.105094910 CEST	58635	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:38.110115051 CEST	53	58635	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:38.152606010 CEST	443	51710	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.152754068 CEST	443	51710	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.152918100 CEST	51710	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.153027058 CEST	51710	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.153053045 CEST	443	51710	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.153069019 CEST	51710	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.153075933 CEST	443	51710	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.156177998 CEST	58636	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.156217098 CEST	443	58636	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.156277895 CEST	58636	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.156491041 CEST	58636	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.156508923 CEST	443	58636	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.461855888 CEST	443	51711	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.462416887 CEST	51711	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.462455034 CEST	443	51711	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.462879896 CEST	51711	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.462887049 CEST	443	51711	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.547673941 CEST	443	51712	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.548382998 CEST	443	51713	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.548966885 CEST	51712	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.548998117 CEST	443	51712	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.549438953 CEST	51713	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.549472094 CEST	443	51713	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.550190926 CEST	51712	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.550205946 CEST	443	51712	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.550730944 CEST	51713	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.550738096 CEST	443	51713	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.554614067 CEST	53	58635	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:38.554917097 CEST	58635	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:38.561661005 CEST	53	58635	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:38.561748028 CEST	58635	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:38.567257881 CEST	443	51711	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.567636967 CEST	443	51711	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.567696095 CEST	51711	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.567773104 CEST	51711	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.567790985 CEST	443	51711	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.567814112 CEST	51711	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.567821026 CEST	443	51711	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.571484089 CEST	58638	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.571522951 CEST	443	58638	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.571595907 CEST	58638	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.571816921 CEST	58638	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.571832895 CEST	443	58638	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.648081064 CEST	443	51712	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.648304939 CEST	443	51712	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.648380995 CEST	51712	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.648572922 CEST	51712	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.648596048 CEST	443	51712	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.648623943 CEST	51712	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.648633003 CEST	443	51712	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.648950100 CEST	443	51713	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.649300098 CEST	443	51713	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.649533987 CEST	51713	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.649564028 CEST	51713	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.649576902 CEST	443	51713	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.649593115 CEST	51713	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.649599075 CEST	443	51713	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.652774096 CEST	58639	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.652808905 CEST	443	58639	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.652904987 CEST	58639	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.652990103 CEST	58640	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.653008938 CEST	443	58640	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.653115034 CEST	58640	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.653218031 CEST	58639	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.653228045 CEST	443	58639	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.653381109 CEST	58640	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.653390884 CEST	443	58640	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.732270956 CEST	443	51714	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.732928991 CEST	51714	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.732954979 CEST	443	51714	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.733563900 CEST	51714	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.733568907 CEST	443	51714	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.820900917 CEST	443	58636	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.821404934 CEST	58636	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.821420908 CEST	443	58636	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.821953058 CEST	58636	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.821957111 CEST	443	58636	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.831496954 CEST	443	51714	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.831566095 CEST	443	51714	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.831615925 CEST	51714	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.831788063 CEST	51714	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.831805944 CEST	443	51714	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.831818104 CEST	51714	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.831824064 CEST	443	51714	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.834719896 CEST	58641	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.834778070 CEST	443	58641	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.834842920 CEST	58641	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.835024118 CEST	58641	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.835036993 CEST	443	58641	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.919735909 CEST	443	58636	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.919965029 CEST	443	58636	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.920022964 CEST	58636	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.920157909 CEST	58636	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.920172930 CEST	443	58636	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.920181990 CEST	58636	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.920186996 CEST	443	58636	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.922976017 CEST	58642	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.923021078 CEST	443	58642	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:38.923079967 CEST	58642	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.923234940 CEST	58642	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:38.923247099 CEST	443	58642	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.220189095 CEST	443	58638	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.220700026 CEST	58638	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.220716000 CEST	443	58638	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.221000910 CEST	58638	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.221005917 CEST	443	58638	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.291589022 CEST	443	58639	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.292161942 CEST	443	58640	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.292361021 CEST	58639	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.292376995 CEST	443	58639	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.292509079 CEST	58639	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.292514086 CEST	443	58639	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.292603970 CEST	58640	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.292639971 CEST	443	58640	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.293107986 CEST	58640	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.293114901 CEST	443	58640	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.320755005 CEST	443	58638	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.320823908 CEST	443	58638	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.320916891 CEST	58638	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.321091890 CEST	58638	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.321110010 CEST	443	58638	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.321177959 CEST	58638	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.321183920 CEST	443	58638	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.323697090 CEST	58643	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.323739052 CEST	443	58643	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.323801041 CEST	58643	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.323914051 CEST	58643	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.323923111 CEST	443	58643	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.391566992 CEST	443	58639	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.391678095 CEST	443	58640	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.391757011 CEST	443	58639	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.391832113 CEST	58639	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.392359018 CEST	443	58640	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.392440081 CEST	58640	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.412355900 CEST	58639	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.412355900 CEST	58639	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.412379026 CEST	443	58639	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.412389994 CEST	443	58639	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.413722992 CEST	58640	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.413752079 CEST	443	58640	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.413767099 CEST	58640	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.413773060 CEST	443	58640	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.487622976 CEST	443	58641	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.496872902 CEST	58641	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.496911049 CEST	443	58641	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.497428894 CEST	58641	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.497442961 CEST	443	58641	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.499495983 CEST	58644	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.499546051 CEST	443	58644	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.499605894 CEST	58644	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.499830008 CEST	58644	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.499844074 CEST	443	58644	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.500740051 CEST	58645	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.500786066 CEST	443	58645	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.500845909 CEST	58645	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.501132011 CEST	58645	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.501144886 CEST	443	58645	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.572204113 CEST	443	58642	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.573153019 CEST	58642	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.573153019 CEST	58642	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.573215961 CEST	443	58642	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.573229074 CEST	443	58642	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.594794035 CEST	443	58641	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.595076084 CEST	443	58641	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.595340967 CEST	58641	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.603179932 CEST	58641	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.603179932 CEST	58641	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.603210926 CEST	443	58641	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.603224993 CEST	443	58641	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.649219990 CEST	58646	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.649332047 CEST	443	58646	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.649493933 CEST	58646	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.677160978 CEST	443	58642	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.677200079 CEST	443	58642	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.677258968 CEST	443	58642	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.677288055 CEST	58642	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.677335024 CEST	58642	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.680337906 CEST	58646	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.680380106 CEST	443	58646	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.700552940 CEST	58642	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.700552940 CEST	58642	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.700581074 CEST	443	58642	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.700592995 CEST	443	58642	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.702966928 CEST	58647	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.703011990 CEST	443	58647	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.703108072 CEST	58647	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.707442045 CEST	58647	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.707456112 CEST	443	58647	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.724534035 CEST	58648	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:39.724546909 CEST	443	58648	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:39.724612951 CEST	58648	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:39.725208998 CEST	58648	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:39.725220919 CEST	443	58648	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:39.969244003 CEST	443	58643	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.971772909 CEST	58643	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.971844912 CEST	443	58643	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:39.972215891 CEST	58643	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:39.972229958 CEST	443	58643	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.069677114 CEST	443	58643	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.069730043 CEST	443	58643	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.069930077 CEST	58643	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.070106983 CEST	58643	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.070106983 CEST	58643	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.070152998 CEST	443	58643	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.070180893 CEST	443	58643	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.076929092 CEST	58649	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.076966047 CEST	443	58649	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.077225924 CEST	58649	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.077225924 CEST	58649	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.077265978 CEST	443	58649	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.142992020 CEST	443	58645	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.144438028 CEST	58645	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.144484043 CEST	443	58645	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.148539066 CEST	58645	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.148551941 CEST	443	58645	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.167156935 CEST	443	58644	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.168001890 CEST	58644	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.168020010 CEST	443	58644	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.168529034 CEST	58644	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.168534994 CEST	443	58644	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.243249893 CEST	443	58645	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.243921041 CEST	443	58645	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.244360924 CEST	58645	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.244360924 CEST	58645	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.244630098 CEST	58645	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.244672060 CEST	443	58645	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.247116089 CEST	58650	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.247168064 CEST	443	58650	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.248524904 CEST	58650	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.248524904 CEST	58650	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.248567104 CEST	443	58650	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.269808054 CEST	443	58644	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.269953012 CEST	443	58644	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.270018101 CEST	443	58644	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.270064116 CEST	58644	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.270160913 CEST	58644	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.270390987 CEST	58644	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.270391941 CEST	58644	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.270411968 CEST	443	58644	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.270423889 CEST	443	58644	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.274894953 CEST	58651	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.274940014 CEST	443	58651	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.280791998 CEST	58651	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.280792952 CEST	58651	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.280843019 CEST	443	58651	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.322391033 CEST	443	58646	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.323000908 CEST	58646	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.323050022 CEST	443	58646	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.324546099 CEST	58646	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.324574947 CEST	443	58646	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.357929945 CEST	443	58647	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.358598948 CEST	58647	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.358637094 CEST	443	58647	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.359148979 CEST	58647	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.359157085 CEST	443	58647	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.422662973 CEST	443	58646	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.422745943 CEST	443	58646	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.422873974 CEST	58646	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.423140049 CEST	58646	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.423141003 CEST	58646	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.423198938 CEST	443	58646	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.423228979 CEST	443	58646	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.426611900 CEST	58652	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.426695108 CEST	443	58652	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.426873922 CEST	58652	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.427088022 CEST	58652	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.427108049 CEST	443	58652	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.464148998 CEST	443	58647	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.466358900 CEST	443	58647	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.466434956 CEST	58647	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.466702938 CEST	58647	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.466702938 CEST	58647	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.466728926 CEST	443	58647	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.466743946 CEST	443	58647	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.469902992 CEST	58653	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.469934940 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.470163107 CEST	58653	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.470163107 CEST	58653	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.470190048 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.560198069 CEST	443	58648	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:40.560287952 CEST	58648	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:40.563982010 CEST	58648	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:40.563997030 CEST	443	58648	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:40.564757109 CEST	443	58648	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:40.566575050 CEST	58648	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:40.566633940 CEST	58648	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:40.566642046 CEST	443	58648	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:40.566879988 CEST	58648	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:40.607415915 CEST	443	58648	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:40.711498022 CEST	443	58649	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.712140083 CEST	58649	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.712163925 CEST	443	58649	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.713222980 CEST	58649	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.713229895 CEST	443	58649	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.747658014 CEST	443	58648	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:40.747807026 CEST	443	58648	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:40.747859955 CEST	58648	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:40.748172045 CEST	58648	443	192.168.2.6	40.113.103.199
Oct 8, 2024 10:02:40.748198032 CEST	443	58648	40.113.103.199	192.168.2.6
Oct 8, 2024 10:02:40.812490940 CEST	443	58649	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.812520981 CEST	443	58649	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.812563896 CEST	443	58649	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.812714100 CEST	58649	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.812714100 CEST	58649	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.813448906 CEST	58649	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.813448906 CEST	58649	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.813483953 CEST	443	58649	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.813498974 CEST	443	58649	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.817605972 CEST	58654	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.817642927 CEST	443	58654	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.817703962 CEST	58654	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.817838907 CEST	58654	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.817847967 CEST	443	58654	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.896750927 CEST	443	58650	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.897442102 CEST	58650	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.897461891 CEST	443	58650	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.898097992 CEST	58650	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.898103952 CEST	443	58650	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.936469078 CEST	443	58651	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.937069893 CEST	58651	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.937088013 CEST	443	58651	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.937890053 CEST	58651	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.937895060 CEST	443	58651	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.997395992 CEST	443	58650	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.997802973 CEST	443	58650	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:40.997951984 CEST	58650	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.997952938 CEST	58650	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:40.997952938 CEST	58650	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.001682997 CEST	58655	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.001719952 CEST	443	58655	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.001789093 CEST	58655	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.001935005 CEST	58655	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.001950979 CEST	443	58655	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.036066055 CEST	443	58651	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.036654949 CEST	443	58651	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.036720991 CEST	58651	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.036777020 CEST	58651	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.036796093 CEST	443	58651	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.036808968 CEST	58651	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.036813974 CEST	443	58651	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.039936066 CEST	58656	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.039949894 CEST	443	58656	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.040009022 CEST	58656	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.040199041 CEST	58656	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.040210962 CEST	443	58656	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.068226099 CEST	443	58652	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.068814993 CEST	58652	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.068854094 CEST	443	58652	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.069400072 CEST	58652	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.069406986 CEST	443	58652	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.149353981 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.149940968 CEST	58653	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.149964094 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.150408983 CEST	58653	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.150414944 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.166228056 CEST	443	58652	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.166424036 CEST	443	58652	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.166480064 CEST	58652	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.166524887 CEST	58652	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.166548967 CEST	443	58652	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.166555882 CEST	58652	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.166562080 CEST	443	58652	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.169868946 CEST	58657	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.169899940 CEST	443	58657	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.169964075 CEST	58657	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.170085907 CEST	58657	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.170095921 CEST	443	58657	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.259766102 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.259833097 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.259875059 CEST	58653	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.259885073 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.259944916 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.259987116 CEST	58653	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.260108948 CEST	58653	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.260122061 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.260128975 CEST	58653	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.260134935 CEST	443	58653	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.262845993 CEST	58658	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.262864113 CEST	443	58658	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.262929916 CEST	58658	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.263056993 CEST	58658	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.263067007 CEST	443	58658	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.310831070 CEST	58650	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.310853958 CEST	443	58650	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.456073046 CEST	443	58654	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.456530094 CEST	58654	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.456557035 CEST	443	58654	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.456989050 CEST	58654	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.456995010 CEST	443	58654	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.555733919 CEST	443	58654	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.555794001 CEST	443	58654	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.556166887 CEST	58654	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.556166887 CEST	58654	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.558532953 CEST	58654	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.558552980 CEST	443	58654	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.559012890 CEST	58659	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.559060097 CEST	443	58659	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.559710979 CEST	58659	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.560616016 CEST	58659	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.560628891 CEST	443	58659	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.638642073 CEST	443	58655	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.639668941 CEST	58655	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.639668941 CEST	58655	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.639702082 CEST	443	58655	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.639719009 CEST	443	58655	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.695619106 CEST	443	58656	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.696536064 CEST	58656	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.696561098 CEST	443	58656	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.696974993 CEST	58656	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.696984053 CEST	443	58656	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.736882925 CEST	443	58655	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.736947060 CEST	443	58655	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.737010956 CEST	443	58655	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.737071991 CEST	58655	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.737154007 CEST	58655	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.737215996 CEST	58655	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.737236023 CEST	443	58655	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.737282038 CEST	58655	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.737287998 CEST	443	58655	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.743446112 CEST	58660	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.743490934 CEST	443	58660	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.743729115 CEST	58660	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.743729115 CEST	58660	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.743772030 CEST	443	58660	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.796698093 CEST	443	58656	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.796775103 CEST	443	58656	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.796860933 CEST	58656	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.796982050 CEST	58656	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.796982050 CEST	58656	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.797004938 CEST	443	58656	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.797020912 CEST	443	58656	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.800595999 CEST	58661	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.800632954 CEST	443	58661	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.800724030 CEST	58661	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.800890923 CEST	58661	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.800904036 CEST	443	58661	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.817764044 CEST	443	58657	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.818433046 CEST	58657	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.818459034 CEST	443	58657	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.819077015 CEST	58657	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.819093943 CEST	443	58657	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.899975061 CEST	443	58658	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.901099920 CEST	58658	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.901099920 CEST	58658	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.901128054 CEST	443	58658	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.901148081 CEST	443	58658	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.915935040 CEST	443	58657	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.916105032 CEST	443	58657	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.916542053 CEST	58657	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.916595936 CEST	58657	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.916596889 CEST	58657	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.916616917 CEST	443	58657	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.916629076 CEST	443	58657	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.919214964 CEST	58662	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.919256926 CEST	443	58662	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:41.919589043 CEST	58662	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.919636011 CEST	58662	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:41.919645071 CEST	443	58662	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.041331053 CEST	443	58658	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.041625023 CEST	443	58658	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.042023897 CEST	58658	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.042208910 CEST	58658	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.042227030 CEST	443	58658	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.042331934 CEST	58658	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.042339087 CEST	443	58658	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.045164108 CEST	58663	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.045227051 CEST	443	58663	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.045624018 CEST	58663	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.046550035 CEST	58663	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.046580076 CEST	443	58663	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.225092888 CEST	443	58659	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.225658894 CEST	58659	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.225725889 CEST	443	58659	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.226303101 CEST	58659	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.226316929 CEST	443	58659	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.327624083 CEST	443	58659	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.327666044 CEST	443	58659	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.327709913 CEST	443	58659	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.327730894 CEST	58659	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.327826977 CEST	58659	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.328089952 CEST	58659	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.328109980 CEST	443	58659	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.328133106 CEST	58659	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.328139067 CEST	443	58659	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.330863953 CEST	58664	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.330907106 CEST	443	58664	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.331429005 CEST	58664	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.332046032 CEST	58664	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.332057953 CEST	443	58664	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.428910971 CEST	443	58660	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.429466009 CEST	58660	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.429490089 CEST	443	58660	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.430131912 CEST	58660	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.430135965 CEST	443	58660	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.436142921 CEST	443	58661	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.436527014 CEST	58661	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.436547041 CEST	443	58661	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.439290047 CEST	58661	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.439296007 CEST	443	58661	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.534431934 CEST	443	58660	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.534563065 CEST	443	58660	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.534840107 CEST	58660	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.534879923 CEST	58660	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.534879923 CEST	58660	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.534902096 CEST	443	58660	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.534912109 CEST	443	58660	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.538584948 CEST	58665	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.538628101 CEST	443	58665	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.538886070 CEST	58665	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.543056011 CEST	443	58661	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.543093920 CEST	58665	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.543106079 CEST	443	58665	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.543687105 CEST	443	58661	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.546772003 CEST	58666	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.546780109 CEST	443	58666	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.546901941 CEST	58666	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.548520088 CEST	58661	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.548520088 CEST	58661	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.548520088 CEST	58661	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.548536062 CEST	58666	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.548544884 CEST	443	58666	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.575201988 CEST	443	58662	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.576127052 CEST	58662	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.576127052 CEST	58662	443	192.168.2.6	13.107.246.60
Oct 8, 2024 10:02:42.576153040 CEST	443	58662	13.107.246.60	192.168.2.6
Oct 8, 2024 10:02:42.576168060 CEST	443	58662	13.107.246.60	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 10:02:19.274089098 CEST	53	62369	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:19.395967007 CEST	53	52723	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:20.602816105 CEST	53	55390	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:21.199636936 CEST	50596	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:21.199872971 CEST	62600	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:21.209458113 CEST	53	50596	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:21.230495930 CEST	49719	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:21.327316046 CEST	53	62600	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:21.355469942 CEST	53	49719	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:21.380595922 CEST	51256	53	192.168.2.6	8.8.8.8
Oct 8, 2024 10:02:21.380832911 CEST	55269	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:21.387480974 CEST	53	51256	8.8.8.8	192.168.2.6
Oct 8, 2024 10:02:21.387567997 CEST	53	55269	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:22.395251036 CEST	63532	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:22.395456076 CEST	64294	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:22.404218912 CEST	53	63532	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:22.522392035 CEST	53	64294	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:23.110758066 CEST	52449	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:23.111326933 CEST	51556	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:23.118161917 CEST	53	52449	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:23.119689941 CEST	53	51556	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:27.491136074 CEST	50386	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:27.491302967 CEST	53358	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:27.618148088 CEST	53	53358	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:27.662607908 CEST	53	50386	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:27.664176941 CEST	50696	53	192.168.2.6	1.1.1.1
Oct 8, 2024 10:02:27.694612980 CEST	53	50696	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:36.630039930 CEST	53	65352	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:37.795181036 CEST	53	54191	1.1.1.1	192.168.2.6
Oct 8, 2024 10:02:38.099375010 CEST	53	53990	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 8, 2024 10:02:21.327426910 CEST	192.168.2.6	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
Oct 8, 2024 10:02:22.522501945 CEST	192.168.2.6	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 8, 2024 10:02:21.199636936 CEST	192.168.2.6	1.1.1.1	0x6be2	Standard query (0)	daddyrdp.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:21.199872971 CEST	192.168.2.6	1.1.1.1	0xa6c6	Standard query (0)	daddyrdp.com	65	IN (0x0001)	false
Oct 8, 2024 10:02:21.230495930 CEST	192.168.2.6	1.1.1.1	0x3230	Standard query (0)	daddyrdp.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:21.380595922 CEST	192.168.2.6	8.8.8.8	0xfc1b	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:21.380832911 CEST	192.168.2.6	1.1.1.1	0x5d1d	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:22.395251036 CEST	192.168.2.6	1.1.1.1	0x37ff	Standard query (0)	daddyrdp.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:22.395456076 CEST	192.168.2.6	1.1.1.1	0x4043	Standard query (0)	daddyrdp.com	65	IN (0x0001)	false
Oct 8, 2024 10:02:23.110758066 CEST	192.168.2.6	1.1.1.1	0xffa6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:23.111326933 CEST	192.168.2.6	1.1.1.1	0x3668	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 10:02:27.491136074 CEST	192.168.2.6	1.1.1.1	0xf35a	Standard query (0)	daddyrdp.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:27.491302967 CEST	192.168.2.6	1.1.1.1	0x3140	Standard query (0)	daddyrdp.com	65	IN (0x0001)	false
Oct 8, 2024 10:02:27.664176941 CEST	192.168.2.6	1.1.1.1	0xaf01	Standard query (0)	daddyrdp.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 8, 2024 10:02:21.209458113 CEST	1.1.1.1	192.168.2.6	0x6be2	Name error (3)	daddyrdp.com	none	none	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:21.327316046 CEST	1.1.1.1	192.168.2.6	0xa6c6	Name error (3)	daddyrdp.com	none	none	65	IN (0x0001)	false
Oct 8, 2024 10:02:21.355469942 CEST	1.1.1.1	192.168.2.6	0x3230	Name error (3)	daddyrdp.com	none	none	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:21.387480974 CEST	8.8.8.8	192.168.2.6	0xfc1b	No error (0)	google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:21.387567997 CEST	1.1.1.1	192.168.2.6	0x5d1d	No error (0)	google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:22.404218912 CEST	1.1.1.1	192.168.2.6	0x37ff	Name error (3)	daddyrdp.com	none	none	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:22.522392035 CEST	1.1.1.1	192.168.2.6	0x4043	Name error (3)	daddyrdp.com	none	none	65	IN (0x0001)	false
Oct 8, 2024 10:02:23.118161917 CEST	1.1.1.1	192.168.2.6	0xffa6	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:23.119689941 CEST	1.1.1.1	192.168.2.6	0x3668	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 10:02:27.618148088 CEST	1.1.1.1	192.168.2.6	0x3140	Name error (3)	daddyrdp.com	none	none	65	IN (0x0001)	false
Oct 8, 2024 10:02:27.662607908 CEST	1.1.1.1	192.168.2.6	0xf35a	Name error (3)	daddyrdp.com	none	none	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:27.694612980 CEST	1.1.1.1	192.168.2.6	0xaf01	Name error (3)	daddyrdp.com	none	none	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:33.465451956 CEST	1.1.1.1	192.168.2.6	0x8578	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 10:02:33.465451956 CEST	1.1.1.1	192.168.2.6	0x8578	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:34.872581005 CEST	1.1.1.1	192.168.2.6	0xe972	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:02:34.872581005 CEST	1.1.1.1	192.168.2.6	0xe972	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49713	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:20 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 59 54 37 66 2b 65 4e 72 5a 45 53 59 49 75 41 45 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 34 64 61 35 35 65 61 38 62 36 64 32 36 63 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: YT7f+eNrZESYIuAE.1Context: b4da55ea8b6d26cd
2024-10-08 08:02:20 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-08 08:02:20 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 59 54 37 66 2b 65 4e 72 5a 45 53 59 49 75 41 45 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 34 64 61 35 35 65 61 38 62 36 64 32 36 63 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 4e 46 50 70 7a 65 71 52 73 75 58 71 70 6c 74 31 43 38 59 4e 73 6a 53 6f 75 30 38 67 54 58 33 53 72 30 7a 78 37 37 35 73 77 39 4f 47 4e 69 37 35 74 57 76 39 77 6c 55 4a 50 56 45 70 59 41 7a 68 6d 55 34 32 30 58 79 4c 73 6d 71 57 31 4e 4b 75 44 65 4f 54 59 54 69 61 59 36 79 6a 68 74 35 4f 34 65 38 76 42 61 77 70 75 36 4d 52 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: YT7f+eNrZESYIuAE.2Context: b4da55ea8b6d26cd<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdNFPpzeqRsuXqplt1C8YNsjSou08gTX3Sr0zx775sw9OGNi75tWv9wlUJPVEpYAzhmU420XyLsmqW1NKuDeOTYTiaY6yjht5O4e8vBawpu6MR
2024-10-08 08:02:20 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 59 54 37 66 2b 65 4e 72 5a 45 53 59 49 75 41 45 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 34 64 61 35 35 65 61 38 62 36 64 32 36 63 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: YT7f+eNrZESYIuAE.3Context: b4da55ea8b6d26cd<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-08 08:02:20 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-08 08:02:20 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 46 34 4b 33 48 56 46 6b 34 30 69 4f 76 55 59 69 2b 43 77 74 68 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: F4K3HVFk40iOvUYi+CwthQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49719	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:24 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:24 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:24 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 06 Oct 2024 16:59:23 GMT ETag: "0x8DCE6283A3FA58B" x-ms-request-id: 86eceaf5-401e-00a3-6fa2-188b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080224Z-1657d5bbd487nf59mzf5b3gk8n00000004cg000000002vt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:24 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-08 08:02:24 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-08 08:02:24 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-08 08:02:24 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-08 08:02:24 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-08 08:02:24 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-08 08:02:24 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-08 08:02:24 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-08 08:02:24 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-08 08:02:24 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49722	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:25 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:25 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080225Z-1657d5bbd48qjg85buwfdynm5w00000004p000000000dddt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:25 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49724	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:25 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:25 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:25 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080225Z-1657d5bbd4824mj9d6vp65b6n400000004sg00000000dtqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:25 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49721	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:25 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:25 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:25 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080225Z-1657d5bbd48dfrdj7px744zp8s00000004bg00000000a85m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:25 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49723	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:25 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:25 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:25 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080225Z-1657d5bbd482krtfgrg72dfbtn00000004c0000000008shu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:25 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49725	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:25 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080225Z-1657d5bbd48qjg85buwfdynm5w00000004p000000000dddu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49727	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:26 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080226Z-1657d5bbd48xlwdx82gahegw400000000500000000000dtn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:26 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:26 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080226Z-1657d5bbd48762wn1qw4s5sd3000000004n0000000003a56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:26 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49729	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:26 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080226Z-1657d5bbd48t66tjar5xuq22r800000004s0000000002pzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49728	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:26 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080226Z-1657d5bbd48sqtlf1huhzuwq7000000004eg000000004tvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49731	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:26 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:26 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080226Z-1657d5bbd48lknvp09v995n790000000047000000000cdt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:26 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49732	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:26 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080226Z-1657d5bbd48wd55zet5pcra0cg00000004qg0000000042rx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:26 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49736	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:26 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080226Z-1657d5bbd48sqtlf1huhzuwq7000000004cg0000000088gc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49734	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:26 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080226Z-1657d5bbd4824mj9d6vp65b6n400000004sg00000000dts3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49735	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:26 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080226Z-1657d5bbd482lxwq1dp2t1zwkc00000004cg000000008zfk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49733	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:26 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080226Z-1657d5bbd48xdq5dkwwugdpzr0000000051g000000004ax7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49737	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:27 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080227Z-1657d5bbd48jwrqbupe3ktsx9w00000004wg000000006nu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:27 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:27 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080227Z-1657d5bbd48brl8we3nu8cxwgn000000052g000000002m2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49738	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:27 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080227Z-1657d5bbd482lxwq1dp2t1zwkc00000004f0000000004tnx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49740	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:27 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:27 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080227Z-1657d5bbd48t66tjar5xuq22r800000004ng000000007egs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:27 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49741	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:27 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:27 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080227Z-1657d5bbd48lknvp09v995n79000000004a0000000006g40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:27 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:28 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080228Z-1657d5bbd48xdq5dkwwugdpzr00000000530000000001ypz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49742	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:28 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 59 37 33 37 54 73 35 77 67 6b 69 33 57 68 2f 52 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 36 65 31 65 34 39 35 66 35 61 33 33 38 33 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Y737Ts5wgki3Wh/R.1Context: f6e1e495f5a33835
2024-10-08 08:02:28 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-08 08:02:28 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 59 37 33 37 54 73 35 77 67 6b 69 33 57 68 2f 52 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 36 65 31 65 34 39 35 66 35 61 33 33 38 33 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 4e 46 50 70 7a 65 71 52 73 75 58 71 70 6c 74 31 43 38 59 4e 73 6a 53 6f 75 30 38 67 54 58 33 53 72 30 7a 78 37 37 35 73 77 39 4f 47 4e 69 37 35 74 57 76 39 77 6c 55 4a 50 56 45 70 59 41 7a 68 6d 55 34 32 30 58 79 4c 73 6d 71 57 31 4e 4b 75 44 65 4f 54 59 54 69 61 59 36 79 6a 68 74 35 4f 34 65 38 76 42 61 77 70 75 36 4d 52 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Y737Ts5wgki3Wh/R.2Context: f6e1e495f5a33835<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdNFPpzeqRsuXqplt1C8YNsjSou08gTX3Sr0zx775sw9OGNi75tWv9wlUJPVEpYAzhmU420XyLsmqW1NKuDeOTYTiaY6yjht5O4e8vBawpu6MR
2024-10-08 08:02:28 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 59 37 33 37 54 73 35 77 67 6b 69 33 57 68 2f 52 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 36 65 31 65 34 39 35 66 35 61 33 33 38 33 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Y737Ts5wgki3Wh/R.3Context: f6e1e495f5a33835<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-08 08:02:28 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-08 08:02:28 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 42 79 76 4b 46 6f 36 4e 42 30 47 54 36 76 72 67 33 79 71 50 2f 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ByvKFo6NB0GT6vrg3yqP/A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49744	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:28 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080228Z-1657d5bbd48t66tjar5xuq22r800000004s0000000002q1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:28 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:28 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080228Z-1657d5bbd48sqtlf1huhzuwq7000000004dg000000006mnx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:28 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49747	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:28 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:28 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080228Z-1657d5bbd482lxwq1dp2t1zwkc00000004g0000000003qr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:28 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49746	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:28 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: d112c6a6-a01e-000d-2160-17d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080228Z-1657d5bbd48lknvp09v995n790000000049000000000893d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49748	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:29 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:29 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080229Z-1657d5bbd48xlwdx82gahegw4000000004yg0000000035nx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:29 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49749	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:29 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080229Z-1657d5bbd48gqrfwecymhhbfm800000003g0000000007knn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:29 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 0f14dc79-301e-0033-774f-19fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080229Z-1657d5bbd48xjgsr3pyv9u71rc00000000t0000000000xu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:29 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:29 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 6943b751-701e-0053-3850-193a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080229Z-1657d5bbd48xjgsr3pyv9u71rc00000000rg000000003fp6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:29 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:29 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080229Z-1657d5bbd48sdh4cyzadbb374800000004dg00000000buyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:29 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b11534be-801e-0035-144c-19752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080229Z-1657d5bbd48xjgsr3pyv9u71rc00000000rg000000003fps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:29 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:29 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080229Z-1657d5bbd48wd55zet5pcra0cg00000004ng000000006ve6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:30 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:29 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080230Z-1657d5bbd48sdh4cyzadbb374800000004k0000000004pyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:30 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:30 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080230Z-1657d5bbd48q6t9vvmrkd293mg00000004qg000000004q65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:30 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:30 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:30 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080230Z-1657d5bbd482lxwq1dp2t1zwkc00000004g0000000003qsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:30 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:30 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:30 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080230Z-1657d5bbd48sqtlf1huhzuwq7000000004dg000000006mq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:30 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:30 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:30 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080230Z-1657d5bbd48cpbzgkvtewk0wu000000004v00000000038a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:30 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:30 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:30 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 11b227e2-601e-0002-7f6b-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080230Z-1657d5bbd487nf59mzf5b3gk8n000000046g00000000cyg8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:30 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:30 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:30 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 4da25c04-901e-0029-2298-18274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080230Z-1657d5bbd48hzllksrq1r6zsvs00000001ug00000000ackv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:30 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:30 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080230Z-1657d5bbd48jwrqbupe3ktsx9w00000004ug00000000awcp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:31 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:31 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: b4e81392-401e-008c-09e7-1886c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080231Z-1657d5bbd48brl8we3nu8cxwgn00000004x000000000bd5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:31 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:31 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:31 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080231Z-1657d5bbd487nf59mzf5b3gk8n00000004cg000000002vy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:31 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:31 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:31 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: aec9c823-b01e-0021-43de-18cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080231Z-1657d5bbd48dfrdj7px744zp8s00000004fg0000000040dr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:31 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:31 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:31 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080231Z-1657d5bbd48sdh4cyzadbb374800000004fg000000008k8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:31 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:31 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:31 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 6cd8d2ce-101e-005a-2c42-19882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080231Z-1657d5bbd48xjgsr3pyv9u71rc00000000hg000000008pzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:31 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:32 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080232Z-1657d5bbd48xsz2nuzq4vfrzg800000004hg00000000779v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:32 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:32 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: cc92db4a-701e-0053-3460-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080232Z-1657d5bbd482lxwq1dp2t1zwkc00000004gg000000002n42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:32 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080232Z-1657d5bbd48qjg85buwfdynm5w00000004qg00000000a7tk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:32 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080232Z-1657d5bbd48vlsxxpe15ac3q7n00000004mg000000009mdh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:32 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080232Z-1657d5bbd48cpbzgkvtewk0wu000000004wg000000000wcq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:32 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:32 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080232Z-1657d5bbd48xsz2nuzq4vfrzg800000004k0000000006450 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:32 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:32 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080232Z-1657d5bbd48q6t9vvmrkd293mg00000004hg00000000d12t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:33 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080233Z-1657d5bbd48tqvfc1ysmtbdrg000000004mg000000003d04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:33 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080233Z-1657d5bbd4824mj9d6vp65b6n400000004y00000000044t4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:33 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 46a5aa72-701e-0032-6004-17a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080233Z-1657d5bbd48vlsxxpe15ac3q7n00000004kg00000000b51g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:33 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:33 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: c8c5dcd0-a01e-0002-72a2-185074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080233Z-1657d5bbd48hzllksrq1r6zsvs00000001v0000000009tgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:33 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:33 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:34 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080234Z-1657d5bbd48tqvfc1ysmtbdrg000000004p00000000017kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:34 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:34 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:34 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080234Z-1657d5bbd48t66tjar5xuq22r800000004mg000000009pw7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:34 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:34 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 963c402d-c01e-00ad-09ed-18a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080234Z-1657d5bbd482krtfgrg72dfbtn00000004eg000000005k0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:34 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:34 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080234Z-1657d5bbd48wd55zet5pcra0cg00000004rg000000002w9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:34 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:34 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080234Z-1657d5bbd48sqtlf1huhzuwq7000000004a000000000cgsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:34 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080234Z-1657d5bbd48xsz2nuzq4vfrzg800000004n0000000002z3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:35 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:35 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:35 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080235Z-1657d5bbd48tnj6wmberkg2xy800000004sg000000006gqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:35 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:35 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:35 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e8be1599-101e-007a-3cac-18047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080235Z-1657d5bbd48hzllksrq1r6zsvs00000001x0000000006482 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:35 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:35 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:35 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080235Z-1657d5bbd48xdq5dkwwugdpzr0000000052g000000002mxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:35 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:35 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 1e2677b8-c01e-0014-3bed-18a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080235Z-1657d5bbd48qjg85buwfdynm5w00000004w0000000001shx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:35 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:35 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: e5c49313-d01e-00ad-284f-19e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080235Z-1657d5bbd48xjgsr3pyv9u71rc00000000r0000000004f5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:35 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:35 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:35 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080235Z-1657d5bbd48cpbzgkvtewk0wu000000004q000000000bhew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:36 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:35 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: cc515549-501e-005b-0a44-19d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080235Z-1657d5bbd48xjgsr3pyv9u71rc00000000tg00000000037r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:36 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080236Z-1657d5bbd48brl8we3nu8cxwgn0000000520000000003csa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:36 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3c7823fd-401e-0015-0c60-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080236Z-1657d5bbd48gqrfwecymhhbfm800000003g0000000007kus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:36 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080236Z-1657d5bbd48tqvfc1ysmtbdrg000000004eg00000000bs2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:36 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 010995e9-b01e-001e-0ddc-180214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080236Z-1657d5bbd48xjgsr3pyv9u71rc00000000n00000000088sp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:36 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:36 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080236Z-1657d5bbd482lxwq1dp2t1zwkc00000004dg00000000738n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:36 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:36 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 8a1c1e24-901e-0029-08e9-18274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080236Z-1657d5bbd482tlqpvyz9e93p5400000004s00000000079q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:36 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:37 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:37 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080237Z-1657d5bbd48sdh4cyzadbb374800000004kg000000003urn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:37 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:37 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: e4306a6b-001e-0034-39e8-18dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080237Z-1657d5bbd487nf59mzf5b3gk8n00000004c0000000003ufp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:37 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	51706	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:37 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080237Z-1657d5bbd48sqtlf1huhzuwq7000000004gg000000001kh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:37 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	51707	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:37 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:37 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080237Z-1657d5bbd48vlsxxpe15ac3q7n00000004m000000000aptz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:37 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	51708	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:37 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:37 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:37 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 731e24c5-901e-0016-13f9-18efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080237Z-1657d5bbd482tlqpvyz9e93p5400000004r0000000009dmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:37 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	51709	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:37 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:38 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 72fa1ab1-901e-0016-03ed-18efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080238Z-1657d5bbd48jwrqbupe3ktsx9w00000004y0000000004day x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:38 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	51710	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:38 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:38 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080238Z-1657d5bbd48wd55zet5pcra0cg00000004m000000000a8qd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	51711	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:38 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:38 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080238Z-1657d5bbd482krtfgrg72dfbtn00000004e0000000006f34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:38 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	51712	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:38 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:38 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080238Z-1657d5bbd48t66tjar5xuq22r800000004p0000000006879 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	51713	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:38 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:38 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080238Z-1657d5bbd48vhs7r2p1ky7cs5w000000050g000000005usn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:38 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	51714	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:38 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:38 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080238Z-1657d5bbd48sdh4cyzadbb374800000004p00000000004sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:38 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	58636	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:38 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:38 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:38 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 66b7e080-d01e-002b-1df7-1825fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080238Z-1657d5bbd48t66tjar5xuq22r800000004t0000000000cy9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:38 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	58638	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:39 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:39 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b6c21a8e-c01e-008e-115a-177381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080239Z-1657d5bbd482tlqpvyz9e93p5400000004u0000000004nkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	58639	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:39 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:39 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:39 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080239Z-1657d5bbd48jwrqbupe3ktsx9w00000004xg0000000051q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:39 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	58640	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:39 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:39 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:39 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080239Z-1657d5bbd487nf59mzf5b3gk8n0000000490000000007r6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:39 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	58641	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:39 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:39 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:39 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080239Z-1657d5bbd48brl8we3nu8cxwgn00000004wg00000000cecv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:39 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	58642	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:39 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:39 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:39 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: c7b66cba-b01e-005c-04ff-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080239Z-1657d5bbd48cpbzgkvtewk0wu000000004t0000000006krf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:39 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	58643	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:39 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:40 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080240Z-1657d5bbd482lxwq1dp2t1zwkc00000004h0000000002cmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:40 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	58645	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:40 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:40 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080240Z-1657d5bbd487nf59mzf5b3gk8n00000004bg000000004dfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:40 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	58644	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:40 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:40 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080240Z-1657d5bbd48qjg85buwfdynm5w00000004sg00000000749d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:40 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	58646	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:40 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:40 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080240Z-1657d5bbd4824mj9d6vp65b6n400000004y00000000044zx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:40 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	58647	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:40 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:40 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: afc7ebd4-e01e-0051-1eef-1884b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080240Z-1657d5bbd48dfrdj7px744zp8s00000004g0000000003gc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:40 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	58648	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:40 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 71 70 42 4c 2f 34 74 45 35 55 79 50 74 76 67 69 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 34 63 61 63 64 32 36 32 64 32 31 62 39 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: qpBL/4tE5UyPtvgi.1Context: ff4cacd262d21b9c
2024-10-08 08:02:40 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-08 08:02:40 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 71 70 42 4c 2f 34 74 45 35 55 79 50 74 76 67 69 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 34 63 61 63 64 32 36 32 64 32 31 62 39 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 4e 46 50 70 7a 65 71 52 73 75 58 71 70 6c 74 31 43 38 59 4e 73 6a 53 6f 75 30 38 67 54 58 33 53 72 30 7a 78 37 37 35 73 77 39 4f 47 4e 69 37 35 74 57 76 39 77 6c 55 4a 50 56 45 70 59 41 7a 68 6d 55 34 32 30 58 79 4c 73 6d 71 57 31 4e 4b 75 44 65 4f 54 59 54 69 61 59 36 79 6a 68 74 35 4f 34 65 38 76 42 61 77 70 75 36 4d 52 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: qpBL/4tE5UyPtvgi.2Context: ff4cacd262d21b9c<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdNFPpzeqRsuXqplt1C8YNsjSou08gTX3Sr0zx775sw9OGNi75tWv9wlUJPVEpYAzhmU420XyLsmqW1NKuDeOTYTiaY6yjht5O4e8vBawpu6MR
2024-10-08 08:02:40 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 71 70 42 4c 2f 34 74 45 35 55 79 50 74 76 67 69 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 34 63 61 63 64 32 36 32 64 32 31 62 39 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: qpBL/4tE5UyPtvgi.3Context: ff4cacd262d21b9c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-08 08:02:40 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-08 08:02:40 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 48 50 6c 78 65 70 69 4e 64 55 71 39 68 4b 74 4b 6b 76 47 4b 51 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: HPlxepiNdUq9hKtKkvGKQw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	58649	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:40 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:40 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080240Z-1657d5bbd48xlwdx82gahegw4000000004ug000000009nnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:40 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	58650	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:40 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:40 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 08c5e976-701e-0021-2adc-183d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080240Z-1657d5bbd48762wn1qw4s5sd3000000004k00000000064dc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:40 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	58651	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:40 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:41 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:40 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080240Z-1657d5bbd48sqtlf1huhzuwq7000000004d0000000007n3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:41 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	58652	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:41 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:41 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: f076ebb2-f01e-001f-3766-175dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080241Z-1657d5bbd48lknvp09v995n790000000048000000000a7gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	58653	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:41 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:41 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080241Z-1657d5bbd48xsz2nuzq4vfrzg800000004g0000000008vdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:41 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	58654	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:41 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:41 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080241Z-1657d5bbd487nf59mzf5b3gk8n00000004ag000000005ke1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:41 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	58655	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:41 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:41 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080241Z-1657d5bbd48sqtlf1huhzuwq7000000004g0000000002nwk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:41 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	58656	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:41 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:41 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 77012b0e-b01e-0097-0bff-164f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080241Z-1657d5bbd48xdq5dkwwugdpzr0000000052g000000002n5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:41 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	58657	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:41 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:41 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a18d9b1d-601e-0002-1f03-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080241Z-1657d5bbd48gqrfwecymhhbfm800000003hg0000000050ye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:41 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	58658	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:41 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:42 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:41 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: d4fd285a-d01e-005a-06ed-167fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080241Z-1657d5bbd48jwrqbupe3ktsx9w00000004t000000000cqk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:42 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	58659	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:42 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:42 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:42 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 1eaf42aa-001e-0014-79db-185151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080242Z-1657d5bbd48xlwdx82gahegw4000000004ug000000009nq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:42 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	58660	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:42 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:42 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:42 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: c9f5ea47-201e-0071-33fe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080242Z-1657d5bbd48vhs7r2p1ky7cs5w0000000500000000006enc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:42 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	58661	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:42 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:42 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 76dbcc6a-501e-0035-36ed-16c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080242Z-1657d5bbd48jwrqbupe3ktsx9w00000004vg000000008r0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	58662	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:42 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:42 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 838d785c-001e-0014-24fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080242Z-1657d5bbd48xdq5dkwwugdpzr000000004xg00000000b7uv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	58663	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:42 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:42 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:42 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 4d8e5842-701e-0021-0efe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080242Z-1657d5bbd48gqrfwecymhhbfm800000003f0000000008z9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:42 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	58664	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:43 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:43 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8a56303a-c01e-0066-0f01-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080243Z-1657d5bbd4824mj9d6vp65b6n400000004ug00000000a57e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	58665	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:43 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:43 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: cd0b82ba-d01e-0049-1304-17e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080243Z-1657d5bbd48gqrfwecymhhbfm800000003d000000000c00q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:43 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	58667	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:43 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:43 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: d3a3eb01-b01e-003d-1ef1-16d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080243Z-1657d5bbd48xlwdx82gahegw4000000004w0000000007gg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	58668	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:43 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:43 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: ca2bab4f-201e-0071-5e14-17ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080243Z-1657d5bbd48cpbzgkvtewk0wu000000004ug000000003h4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	58666	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:43 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:43 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c184816-a01e-000d-72ff-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080243Z-1657d5bbd48762wn1qw4s5sd3000000004g000000000a3g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:43 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	58669	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:43 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:43 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 4d8e59a4-701e-0021-64fe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080243Z-1657d5bbd48sdh4cyzadbb374800000004hg000000005urk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:43 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	58670	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:43 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:02:44 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:02:43 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4ef38422-401e-000a-160c-174a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080243Z-1657d5bbd48762wn1qw4s5sd3000000004ng0000000020p7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:02:44 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	58671	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:02:44 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 280, Parent PID: 5904

General

Target ID:	0
Start time:	04:02:14
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3496, Parent PID: 280

General

Target ID:	2
Start time:	04:02:16
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 --field-trial-handle=2244,i,18367794271105989800,11067129047863455329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1320, Parent PID: 5904

General

Target ID:	3
Start time:	04:02:19
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://daddyrdp.com"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://daddyrdp.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 280, Parent PID: 5904

General

Chronological Activities

Analysis Process: chrome.exePID: 3496, Parent PID: 280

General

Chronological Activities

Analysis Process: chrome.exePID: 1320, Parent PID: 5904

General

Chronological Activities

Disassembly

Windows Analysis Report
http://daddyrdp.com