Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4

Overview

General Information

Sample URL:	https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4
Analysis ID:	1531619
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 1892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2536,i,7863971053735467859,4641576264320709256,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://filesceodoc.z13.web.core.windows.net/?_kx=Zs9z9y6mvg6ZflIHnJZMqrjbV_EgkvL7ljlRIzMOf98.Y2kzab

LLM: Score: 7 Reasons: The brand 'SharePoint' is well-known and typically associated with Microsoft., The URL 'filesceodoc.z13.web.core.windows.net' does not match the legitimate domain 'sharepoint.com'., The URL uses a subdomain of 'web.core.windows.net', which is a Microsoft Azure domain, but it does not directly indicate a legitimate SharePoint site., The presence of 'filesceodoc' as a subdomain is unusual and could be used to disguise a phishing attempt., The use of a cloud service provider's domain can be legitimate, but it is also a common tactic for phishing sites to appear trustworthy. DOM: 0.0.pages.csv

Source: https://filesceodoc.z13.web.core.windows.net/?_kx=Zs9z9y6mvg6ZflIHnJZMqrjbV_EgkvL7ljlRIzMOf98.Y2kzab

HTTP Parser: Number of links: 0

Source: https://filesceodoc.z13.web.core.windows.net/?_kx=Zs9z9y6mvg6ZflIHnJZMqrjbV_EgkvL7ljlRIzMOf98.Y2kzab

HTTP Parser: Base64 decoded: https://ceo-esign.com

Source: https://filesceodoc.z13.web.core.windows.net/?_kx=Zs9z9y6mvg6ZflIHnJZMqrjbV_EgkvL7ljlRIzMOf98.Y2kzab

HTTP Parser: Title: Verify Your Identity does not match URL

Source: https://filesceodoc.z13.web.core.windows.net/?_kx=Zs9z9y6mvg6ZflIHnJZMqrjbV_EgkvL7ljlRIzMOf98.Y2kzab

HTTP Parser: No favicon

Source: https://filesceodoc.z13.web.core.windows.net/?_kx=Zs9z9y6mvg6ZflIHnJZMqrjbV_EgkvL7ljlRIzMOf98.Y2kzab

HTTP Parser: No <meta name="author".. found

Source: https://filesceodoc.z13.web.core.windows.net/?_kx=Zs9z9y6mvg6ZflIHnJZMqrjbV_EgkvL7ljlRIzMOf98.Y2kzab

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: lawrence-tours.email-provider.eu to https://ctrk.klclick3.com/l/01j9wgwz3cddhq7s33xvym6366_1

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4 HTTP/1.1Host: lawrence-tours.email-provider.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /imagery/reviews/07LERcQBRVgcVKystB3aGUU-11.fit_scale.size_1028x578.v1569471957.jpg HTTP/1.1Host: i.pcmag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://filesceodoc.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /imagery/reviews/07LERcQBRVgcVKystB3aGUU-11.fit_scale.size_1028x578.v1569471957.jpg HTTP/1.1Host: i.pcmag.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: lawrence-tours.email-provider.eu
Source: global traffic	DNS traffic detected: DNS query: ctrk.klclick3.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: i.pcmag.com

Source: chromecache_43.2.dr, chromecache_42.2.dr

String found in binary or memory: https://i.pcmag.com/imagery/reviews/07LERcQBRVgcVKystB3aGUU-11.fit_scale.size_1028x578.v1569471957.j

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443

Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@17/9@10/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2536,i,7863971053735467859,4641576264320709256,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2536,i,7863971053735467859,4641576264320709256,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4	0%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
s-part-0017.t-0009.t-msedge.net	0%	Virustotal		Browse
www.google.com	0%	Virustotal		Browse
i.pcmag.com	0%	Virustotal		Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal		Browse
ctrk.klclick3.com	1%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://i.pcmag.com/imagery/reviews/07LERcQBRVgcVKystB3aGUU-11.fit_scale.size_1028x578.v1569471957.jpg	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
lawrence-tours.email-provider.eu	213.154.235.49	true	false		unknown
www.google.com	142.250.184.196	true	false	0%, Virustotal, Browse	unknown
i.pcmag.com	104.16.20.118	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
ctrk.klclick3.com	unknown	unknown	false	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4	true		unknown
https://i.pcmag.com/imagery/reviews/07LERcQBRVgcVKystB3aGUU-11.fit_scale.size_1028x578.v1569471957.jpg	false	0%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://i.pcmag.com/imagery/reviews/07LERcQBRVgcVKystB3aGUU-11.fit_scale.size_1028x578.v1569471957.j	chromecache_43.2.dr, chromecache_42.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States		15169	GOOGLEUS	false
213.154.235.49	lawrence-tours.email-provider.eu	Netherlands		12859	NL-BITBITBVNL	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
104.16.20.118	i.pcmag.com	United States		13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531619
Start date and time:	2024-10-11 13:58:35 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@17/9@10/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.184.238, 66.102.1.84, 34.104.35.123, 104.17.94.1, 104.17.93.1, 57.150.27.164, 142.250.181.234, 142.250.74.202, 142.250.186.42, 142.250.185.106, 216.58.206.74, 172.217.16.202, 216.58.206.42, 172.217.23.106, 142.250.186.170, 142.250.186.106, 142.250.184.202, 172.217.18.10, 142.250.186.138, 142.250.185.170, 172.217.18.106, 142.250.186.74, 20.12.23.50, 93.184.221.240, 192.229.221.95, 52.165.164.15, 40.69.42.241, 142.250.185.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, web.bl5prdstr19c.store.core.windows.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, cloudflare.klaviyodns.com.cdn.cloudflare.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, filesceodoc.z13.web.core.windows.net, azureedge-t-prod.trafficmanager.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://filesceodoc.z13.web.core.windows.net/?_kx=Zs9z9y6mvg6ZflIHnJZMqrjbV_EgkvL7ljlRIzMOf98.Y2kzab Model: jbxai	{ "brands":["SharePoint", "Online"], "text":"Verify Your Identity", "contains_trigger_text":true, "trigger_text":"You've received a secure document.", "prominent_button_name":"Next", "text_input_field_labels":["Email Address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://filesceodoc.z13.web.core.windows.net/?_kx=Zs9z9y6mvg6ZflIHnJZMqrjbV_EgkvL7ljlRIzMOf98.Y2kzab Model: jbxai	{ "phishing_score":7, "brands":"SharePoint", "legit_domain":"sharepoint.com", "classification":"wellknown", "reasons":["The brand 'SharePoint' is well-known and typically associated with Microsoft.", "The URL 'filesceodoc.z13.web.core.windows.net' does not match the legitimate domain 'sharepoint.com'.", "The URL uses a subdomain of 'web.core.windows.net', which is a Microsoft Azure domain, but it does not directly indicate a legitimate SharePoint site.", "The presence of 'filesceodoc' as a subdomain is unusual and could be used to disguise a phishing attempt.", "The use of a cloud service provider's domain can be legitimate, but it is also a common tactic for phishing sites to appear trustworthy."], "brand_matches":[false], "url_match":false, "brand_input":"SharePoint", "input_fields":"Email Address"}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 42

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3295
Entropy (8bit):	4.9192532462018255
Encrypted:	false
SSDEEP:	48:vr8dkfPVw/WKE4+LBw0h7x1J62/zBhGJg6jxZo7H6GiDSkm9Z3Twi9JZXn1j:vr8a6/bEFdwYx100IxcTFDwW
MD5:	0829C114D72CCAD83D8E1E57720FFF26
SHA1:	C5F9CE95435FFBA48D1FF5EFF174CD3820B84160
SHA-256:	C303538B953C61D7AD3CE8ACE876A57C585D6D615FE15E96790D1336686A7532
SHA-512:	BA077E57AE539FBFC4B3A40D9F5226FF9735A5A1DC48DEACCD4EB55A2E3FF274D22A537D0B477B4DD7C047231B6B6EF24AF03D2E2104C9223B0DE2EAF7475D18
Malicious:	false
Reputation:	low
URL:	https://filesceodoc.z13.web.core.windows.net/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Verify Your Identity</title>. <style>. body { . font-family: "Segoe UI", sans-serif; . background-color: #f4f4f4; . display: flex; . justify-content: center; . align-items: center; . height: 100vh; . margin: 0;. color: #333; . } . .container { . background-color: white; . border: 1px solid #ccc; . border-radius: 5px; . padding: 20px; . width: 90%; . max-width: 350px; . box-shadow: 0 0 10px rgba(0, 0, 0, 0.1); . text-align: center; . } . .container img { . width: 80px; . margin-bottom: 15px; . } . .container h2 { . font-size: 20px; . color: #333; . margin-bottom: 15px; . } . .container p { . color: #666; . margin-bottom: 10px; . font-size: 14px;. } . .container input[type="email"] { . w

Chrome Cache Entry: 43

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3295
Entropy (8bit):	4.9192532462018255
Encrypted:	false
SSDEEP:	48:vr8dkfPVw/WKE4+LBw0h7x1J62/zBhGJg6jxZo7H6GiDSkm9Z3Twi9JZXn1j:vr8a6/bEFdwYx100IxcTFDwW
MD5:	0829C114D72CCAD83D8E1E57720FFF26
SHA1:	C5F9CE95435FFBA48D1FF5EFF174CD3820B84160
SHA-256:	C303538B953C61D7AD3CE8ACE876A57C585D6D615FE15E96790D1336686A7532
SHA-512:	BA077E57AE539FBFC4B3A40D9F5226FF9735A5A1DC48DEACCD4EB55A2E3FF274D22A537D0B477B4DD7C047231B6B6EF24AF03D2E2104C9223B0DE2EAF7475D18
Malicious:	false
Reputation:	low
URL:	https://filesceodoc.z13.web.core.windows.net/?_kx=Zs9z9y6mvg6ZflIHnJZMqrjbV_EgkvL7ljlRIzMOf98.Y2kzab
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Verify Your Identity</title>. <style>. body { . font-family: "Segoe UI", sans-serif; . background-color: #f4f4f4; . display: flex; . justify-content: center; . align-items: center; . height: 100vh; . margin: 0;. color: #333; . } . .container { . background-color: white; . border: 1px solid #ccc; . border-radius: 5px; . padding: 20px; . width: 90%; . max-width: 350px; . box-shadow: 0 0 10px rgba(0, 0, 0, 0.1); . text-align: center; . } . .container img { . width: 80px; . margin-bottom: 15px; . } . .container h2 { . font-size: 20px; . color: #333; . margin-bottom: 15px; . } . .container p { . color: #666; . margin-bottom: 10px; . font-size: 14px;. } . .container input[type="email"] { . w

Chrome Cache Entry: 44

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1027x578, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	15244
Entropy (8bit):	7.975951336310096
Encrypted:	false
SSDEEP:	384:C9Q7RXLCpdtIXDpSuRfChAUAEG3fA2be7VmRoXQ:CQAdtA0uRf2nA13fA2baV
MD5:	97537D0194BEE1D3361D960B62461B7B
SHA1:	6BA088D371442DB35A5277C560B7D642EFAE4C63
SHA-256:	0701C1C3258BDFD0D2AAFFA1A11AB40ECE66B0DD1EEE084EEE5B72F0FF323F9F
SHA-512:	D4B62B5F8056782CD654520EA4F1CD6F598B1D6212807FD7E81B33836A93C79592CED0F4ABE7B259D237EAFDCBC1B894447B9A871C69375F158D0E4FD599B4B9
Malicious:	false
Reputation:	low
URL:	https://i.pcmag.com/imagery/reviews/07LERcQBRVgcVKystB3aGUU-11.fit_scale.size_1028x578.v1569471957.jpg
Preview:	RIFF.;..WEBPVP8 x;...;.....B.>I$.F"."!!...P..en.u..a.~#.7....k._..m.......gY..............7..E.Q.....'.......)}...................\|.....{.......`...~.{........./............g./.....r/.................;.....y/..............o.O._.?............>....7....M.........c......A\|...........%..._.....s...7~..o....<.....7.O..k...........=W......T.9.......6...1PT..p.........AS.].z..sk..S..Nmw..b....=LT.9.......6...1PT..p.........AS.].z..sk..S..Nmw..b....=LT.9.......6...1PT..p.........AS.].z..sk..S..Nmw..b....=LT.9.......6...1PT..p.........AS.].z..sk..S..Nmw..b....=LT.9.......6...1PT..p.........AR..-.w..Q4.!0.S..Nmw..b....=LT.9...........'.....{?.o.[n.g.1PT..p.........AS.].-.?..v...?.{..o..<.........AS.].z..sk..S.8.X..\T.....u...+......>^.8N.z.5\4.9_..J......S.YAI...........Z}.aDu' ...}..Hk.....U?U..Z.I....M.+.Y(....`..tYM.jJ.TH.+.g. ..z...\.6}.Y...s........a...t......Q..<a.V....!..;$.Cy.;\.6..v.@.sk......?..y...i.Q.k(.rS....T....h.....}V..6....

Chrome Cache Entry: 45

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1027x578, components 3
Category:	dropped
Size (bytes):	24917
Entropy (8bit):	7.800358260486447
Encrypted:	false
SSDEEP:	384:Njp1DNQuuO1gnF1Gft864PkHmpWWzUAQg4qg2UzHzDUFIc+p/hys+/40:NKuuOCF1Ftpb5QggHDAvA/hys+n
MD5:	BA95825498DD0008BD553C49F6C680C8
SHA1:	FC365DE9D5C221BA0D89A58321D409D5149B2E92
SHA-256:	45074ABB8B3528BB65BCDF5BBAE6BEBDA3EF318718CD4FDE17B0A9B23E9F6921
SHA-512:	BF6E000D4668D552DEB30E5F15187AB469B7FFDA95A28D160C583E2937E7183B523440D631E87B79DF6B5F451D7681C8D5DED5E25BFDA02B0488C02BE6F28165
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......B...."..........6.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................yp........H.....3.. ...........................................\{f...p)..?..b..6&./x...x. ...qN..ab.V-z....@.......................................x.:.v...#.........Oy...cC......X..^..1B..........,....................................p...CzW...@...........d.(^.......6q...[-....6......:.......a>.:.5.38

Chrome Cache Entry: 46

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H17Y:q
MD5:	156DF0210BF420106CB8AFEBCB3A27D2
SHA1:	970B5EA1194F50A291A239C58D73159FDEC1BA64
SHA-256:	EBDD332E8562CE34374C310F84F4527D93D3F9D2AC27410F824C6647A4DF1DDB
SHA-512:	9AE3CC4E8F274B2A5C2BAA6CE1163181C50071378BE3A782FBA8FF8D7F374E9408BCD137E5B217684DDC470244FEA8C6005AF5B96D25BA3AD086550679DF6578
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlZX-ua6P-k3RIFDZjmzqo=?alt=proto
Preview:	CgkKBw2Y5s6qGgA=

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 13:59:28.403595924 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 11, 2024 13:59:29.254879951 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.254925013 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.254997969 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.255430937 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.255536079 CEST	443	49736	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.255625963 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.255773067 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.255793095 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.256032944 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.256067991 CEST	443	49736	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.902365923 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.902642965 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.902667999 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.904310942 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.904390097 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.905350924 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.905513048 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.905519009 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.905590057 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.925657988 CEST	443	49736	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.925931931 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.925961018 CEST	443	49736	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.929492950 CEST	443	49736	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.929586887 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.929888964 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.929968119 CEST	443	49736	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.956490993 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.956505060 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.971992016 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:29.972052097 CEST	443	49736	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:29.999435902 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:30.014843941 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:30.168227911 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:30.168387890 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:30.168459892 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:30.169282913 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:30.169302940 CEST	443	49735	213.154.235.49	192.168.2.4
Oct 11, 2024 13:59:30.169317007 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:30.169353962 CEST	49735	443	192.168.2.4	213.154.235.49
Oct 11, 2024 13:59:31.663434029 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 11, 2024 13:59:31.663537025 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 11, 2024 13:59:31.663629055 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 11, 2024 13:59:31.664021015 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 11, 2024 13:59:31.664056063 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 11, 2024 13:59:31.892326117 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:31.892371893 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:31.892432928 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:31.892909050 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:31.892926931 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.301012039 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 11, 2024 13:59:32.301412106 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 11, 2024 13:59:32.301471949 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 11, 2024 13:59:32.303129911 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 11, 2024 13:59:32.303224087 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 11, 2024 13:59:32.304573059 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 11, 2024 13:59:32.304682970 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 11, 2024 13:59:32.321566105 CEST	49744	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:32.321607113 CEST	443	49744	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:32.321681976 CEST	49744	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:32.323086023 CEST	49744	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:32.323105097 CEST	443	49744	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:32.355930090 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 11, 2024 13:59:32.355947018 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 11, 2024 13:59:32.366516113 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.366777897 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.366790056 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.368413925 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.368479967 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.369493008 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.369580030 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.369689941 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.369699955 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.403469086 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 11, 2024 13:59:32.418678045 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.489780903 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.489862919 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.489926100 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.489948034 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.490027905 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.490087032 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.490101099 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.490269899 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.490309954 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.490319014 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.490406990 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.490449905 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.490458012 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.491113901 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.491163015 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.491172075 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.494599104 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.494648933 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.494658947 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.494790077 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.494847059 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.495625019 CEST	49742	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.495640993 CEST	443	49742	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.515588999 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.515597105 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.515645027 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.516135931 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.516149044 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.978279114 CEST	443	49744	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:32.978379965 CEST	49744	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:32.980789900 CEST	49744	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:32.980798960 CEST	443	49744	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:32.981190920 CEST	443	49744	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:32.987518072 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.987854958 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.987883091 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.990683079 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.990766048 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.991389990 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.991549969 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:32.991650105 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:32.991657019 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.027749062 CEST	49744	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:33.031399965 CEST	49744	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:33.033557892 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.075395107 CEST	443	49744	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:33.388290882 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388392925 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388425112 CEST	443	49744	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:33.388442993 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.388469934 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388513088 CEST	443	49744	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:33.388537884 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388606071 CEST	49744	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:33.388616085 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388649940 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.388659954 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388720989 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.388727903 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388781071 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388811111 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388819933 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.388827085 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388868093 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.388869047 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388885021 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.388919115 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.389705896 CEST	49744	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:33.389729977 CEST	443	49744	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:33.389745951 CEST	49744	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:33.389753103 CEST	443	49744	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:33.394361019 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.394409895 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.394445896 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.394448042 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.394459009 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.394491911 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.394814968 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.394862890 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.394911051 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.394917965 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.395045042 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.395087004 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.411489010 CEST	49746	443	192.168.2.4	104.16.20.118
Oct 11, 2024 13:59:33.411500931 CEST	443	49746	104.16.20.118	192.168.2.4
Oct 11, 2024 13:59:33.442203999 CEST	49748	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:33.442250967 CEST	443	49748	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:33.442311049 CEST	49748	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:33.442800045 CEST	49748	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:33.442819118 CEST	443	49748	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:34.091125011 CEST	443	49748	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:34.091202021 CEST	49748	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:34.103096008 CEST	49748	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:34.103118896 CEST	443	49748	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:34.104145050 CEST	443	49748	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:34.112186909 CEST	49748	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:34.159401894 CEST	443	49748	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:34.378318071 CEST	443	49748	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:34.378469944 CEST	443	49748	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:34.378551006 CEST	49748	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:34.379199028 CEST	49748	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:34.379250050 CEST	443	49748	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:34.379281044 CEST	49748	443	192.168.2.4	95.100.63.156
Oct 11, 2024 13:59:34.379297972 CEST	443	49748	95.100.63.156	192.168.2.4
Oct 11, 2024 13:59:42.209692955 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 11, 2024 13:59:42.209836960 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 11, 2024 13:59:42.209919930 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 11, 2024 13:59:43.881203890 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 11, 2024 13:59:43.881274939 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 11, 2024 14:00:14.981559038 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 14:00:14.981590986 CEST	443	49736	213.154.235.49	192.168.2.4
Oct 11, 2024 14:00:24.457982063 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:24.458077908 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:24.458175898 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:24.458412886 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:24.458451986 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.160578012 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.160849094 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.162247896 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.162280083 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.162522078 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.169455051 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.215416908 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.272617102 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.272680998 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.272723913 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.272893906 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.272893906 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.272974014 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.273190022 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.356784105 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.356827974 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.356992006 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.356992006 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.357059956 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.357186079 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.358551025 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.358607054 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.358655930 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.358676910 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.358701944 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.358777046 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.448442936 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.448525906 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.448685884 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.448759079 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.448802948 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.448929071 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.449080944 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.449119091 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.449165106 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.449178934 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.449218988 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.449279070 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.449702978 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.449744940 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.449789047 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.449800968 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.449834108 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.450459003 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.450504065 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.450505972 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.450536966 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.450556993 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.450606108 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.450606108 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.536906958 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.536952019 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.537175894 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.537177086 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.537242889 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.537409067 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.537417889 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.537445068 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.537491083 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.537518978 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.537518978 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.537539959 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.537573099 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.537573099 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.537628889 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.537895918 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.537936926 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.537988901 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.538001060 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.538053989 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.538150072 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.538592100 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.538631916 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.538666964 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.538678885 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.538717031 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.538815022 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.538948059 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.539062023 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.539129019 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.539771080 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.539804935 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.585051060 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.585154057 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.585185051 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.585196018 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.585216999 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.585274935 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.585275888 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.585360050 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.585365057 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.585752010 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.585752010 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.585813046 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.585843086 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.585855961 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.585891962 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.586069107 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.586091042 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.588931084 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.588949919 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.588989019 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.589035988 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.589167118 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.589167118 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:25.589195013 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:25.589226961 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.439563036 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.440140963 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.440192938 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.440615892 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.440629005 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.441379070 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.441836119 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.441898108 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.442071915 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.442086935 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.442939043 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.443253040 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.443274021 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.443624973 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.443634987 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.445781946 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.446074009 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.446089983 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.446393013 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.446403980 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.452651024 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.452980995 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.452996016 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.453331947 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.453341961 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.539860010 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.539916039 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.539971113 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.540000916 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.540050983 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.540066957 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.540115118 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.540168047 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.540292978 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.540326118 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.540374041 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.540389061 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.541066885 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.541119099 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.541245937 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.541307926 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.541307926 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.541554928 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.541554928 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.541603088 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.541631937 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.543412924 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.543461084 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.543545008 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.543770075 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.543801069 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.543883085 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.543924093 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.543981075 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.544267893 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.544286966 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.544357061 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.544370890 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.544420958 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.544421911 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.544466019 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.544591904 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.544591904 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.544610977 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.544630051 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.545095921 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.545238972 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.545300961 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.545336008 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.545336962 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.545351028 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.545376062 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.547158957 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.547266960 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.547337055 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.547533035 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.547569990 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.547651052 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.547673941 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.547741890 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.547842026 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.547866106 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.555675983 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.555845022 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.555910110 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.555948973 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.555948973 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.555963039 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.555990934 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.557830095 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.557843924 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:26.557900906 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.558017015 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:26.558032990 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.155756950 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.156342983 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.156407118 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.156766891 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.156780958 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.162425995 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.162820101 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.162837029 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.162911892 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.163178921 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.163227081 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.163616896 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.163634062 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.164012909 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.164031029 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.164585114 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.164589882 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.165059090 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.165086985 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.165545940 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.165555954 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.166095018 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.166110039 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.166663885 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.166667938 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.262160063 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.262314081 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.262480974 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.262536049 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.262553930 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.262563944 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.262568951 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.262684107 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.262841940 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.262902975 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.263065100 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.263103008 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.263134956 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.263150930 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.264137030 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.264214993 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.264971972 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.265115023 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.265115023 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.265130997 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.265151024 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.265815973 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.265944958 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.266076088 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.266391993 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.266437054 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.266464949 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.266480923 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.266691923 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.266832113 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.266900063 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.266999960 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.267008066 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.267015934 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.267020941 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.274341106 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.274435997 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.274548054 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.275895119 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.275933981 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.276000977 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.277879953 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.277926922 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.278054953 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.278649092 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.278660059 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.279309988 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.279413939 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.279476881 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.279526949 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.279594898 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.279604912 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.279634953 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.279792070 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.279820919 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.280725956 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.280807018 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.280885935 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.281042099 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.281075001 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.919178963 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.920201063 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.920232058 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.921192884 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.921196938 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.921885014 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.922266960 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.922302961 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.922561884 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.922568083 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.925297022 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.925760984 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.925837994 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.926310062 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.926321983 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.927514076 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.927942991 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.928030968 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.928237915 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.928251982 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.936424971 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.937205076 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.937236071 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:28.937772036 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:28.937782049 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.018563986 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.018708944 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.018908978 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.018966913 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.018966913 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.018984079 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.018990040 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.021226883 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.021374941 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.022059917 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.022136927 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.022136927 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.022141933 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.022176027 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.022195101 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.022255898 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.023199081 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.023233891 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.024005890 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.024132013 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.024300098 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.024300098 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.024406910 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.024427891 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.025194883 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.025223017 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.026370049 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.026460886 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.026465893 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.026635885 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.026649952 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.026772976 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.026837111 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.026856899 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.029185057 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.029331923 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.029450893 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.029450893 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.029756069 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.029791117 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.031487942 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.031526089 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.031739950 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.031739950 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.031768084 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.037945986 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.038235903 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.038356066 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.038356066 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.038419008 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.038444042 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.040330887 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.040344954 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.040576935 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.040576935 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.040591955 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.667156935 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.667934895 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.667983055 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.668395996 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.668410063 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.687905073 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.688750982 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.688771009 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.688920975 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.688934088 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.700305939 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.700710058 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.701370001 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.701437950 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.701581001 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.701594114 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.702542067 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.702542067 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.702554941 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.702562094 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.702670097 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.703454018 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.703527927 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.703582048 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.703594923 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.765119076 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.765197992 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.765525103 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.765563011 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.765563011 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.765585899 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.765599012 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.772691011 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.772742033 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.772895098 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.775428057 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.775444031 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.800333023 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.800472975 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.800764084 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.800764084 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.801495075 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.801512003 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.803826094 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.803868055 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.804215908 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.804215908 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.804255009 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.829736948 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.829874039 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.830126047 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.830126047 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.830908060 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.830971003 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.831464052 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.831610918 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.831943989 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.831943989 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.831944942 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.834479094 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.834635019 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.834753990 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.834804058 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.834870100 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.834870100 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.834870100 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.835074902 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.835074902 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.835117102 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.835505009 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.835516930 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.836148977 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.836301088 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.836317062 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.837152004 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.837191105 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:29.837418079 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.837418079 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:29.837451935 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.141853094 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.141875029 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.141885042 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.141959906 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.452466965 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.499166012 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.556436062 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.556493998 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.557679892 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.557702065 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.660005093 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.660186052 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.660264969 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.660443068 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.660491943 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.660527945 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.660543919 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.663939953 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.664017916 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.664112091 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.664242029 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.664268970 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.829669952 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.830384016 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.830425024 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.831127882 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.831134081 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.971864939 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.971954107 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.972018003 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.972213984 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.972242117 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.972258091 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.972265959 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.975441933 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.975486994 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:30.975640059 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.975883007 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:30.975893021 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:31.707786083 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 14:00:31.708158970 CEST	443	49736	213.154.235.49	192.168.2.4
Oct 11, 2024 14:00:31.708256960 CEST	49736	443	192.168.2.4	213.154.235.49
Oct 11, 2024 14:00:31.708372116 CEST	49786	443	192.168.2.4	142.250.184.196
Oct 11, 2024 14:00:31.708421946 CEST	443	49786	142.250.184.196	192.168.2.4
Oct 11, 2024 14:00:31.708496094 CEST	49786	443	192.168.2.4	142.250.184.196
Oct 11, 2024 14:00:31.708920956 CEST	49786	443	192.168.2.4	142.250.184.196
Oct 11, 2024 14:00:31.708940983 CEST	443	49786	142.250.184.196	192.168.2.4
Oct 11, 2024 14:00:32.577889919 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.580472946 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.588017941 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.588062048 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.589458942 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.589464903 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.626929998 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.646846056 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.646886110 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.647427082 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.647443056 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.693909883 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.694051981 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.694122076 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.694432974 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.694463968 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.694475889 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.694483042 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.697861910 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.697890997 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.698025942 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.698204041 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.698220015 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.748019934 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.748099089 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.748219013 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.760190010 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.760236025 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:32.760422945 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:32.760441065 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.018282890 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.018388987 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.018472910 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.018644094 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.018676043 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.155277967 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.155980110 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.156024933 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.156615973 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.156622887 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.158924103 CEST	443	49786	142.250.184.196	192.168.2.4
Oct 11, 2024 14:00:33.159261942 CEST	49786	443	192.168.2.4	142.250.184.196
Oct 11, 2024 14:00:33.159326077 CEST	443	49786	142.250.184.196	192.168.2.4
Oct 11, 2024 14:00:33.159845114 CEST	443	49786	142.250.184.196	192.168.2.4
Oct 11, 2024 14:00:33.160218000 CEST	49786	443	192.168.2.4	142.250.184.196
Oct 11, 2024 14:00:33.160310984 CEST	443	49786	142.250.184.196	192.168.2.4
Oct 11, 2024 14:00:33.203948975 CEST	49786	443	192.168.2.4	142.250.184.196
Oct 11, 2024 14:00:33.256978035 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.257044077 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.257164001 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.257366896 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.257394075 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.257407904 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.257415056 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.260885000 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.260926962 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.260986090 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.261176109 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.261188984 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.796396017 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.836721897 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.836776018 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.837444067 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.837459087 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.901458025 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.902030945 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.902065039 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:33.902811050 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:33.902816057 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.157785892 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.157938957 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.158031940 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.181183100 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.181232929 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.181253910 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.181263924 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.185039043 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.185079098 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.185203075 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.185384035 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.185394049 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.247617960 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.247700930 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.247756004 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.300697088 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.300754070 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.300770998 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.300777912 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.341846943 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.341908932 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.341967106 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.342727900 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.342756987 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.998656988 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:34.999497890 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:34.999593019 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.000427961 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.000441074 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.010467052 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.011075974 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.011148930 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.011913061 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.011929989 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.098598003 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.100493908 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.100647926 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.100732088 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.124113083 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.124183893 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.124265909 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.153462887 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.215725899 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.262873888 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.449112892 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.449188948 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.449954033 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.449968100 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.453593016 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.453645945 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.453675032 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.453694105 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.453836918 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.453866005 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.454309940 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.454314947 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.456163883 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.456163883 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.456238031 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.456278086 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.460273981 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.460303068 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.460508108 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.460654020 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.460666895 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.461707115 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.461767912 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.461888075 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.462126017 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.462158918 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.549767971 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.549943924 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.550112963 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.550228119 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.550228119 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.550271988 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.550295115 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.551345110 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.551542044 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.551600933 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.552217007 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.552231073 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.552238941 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.552243948 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.555113077 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.555202007 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.556224108 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.556787968 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.556808949 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.556852102 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.556969881 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.557007074 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:35.557073116 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:35.557084084 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.154982090 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.155155897 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.155456066 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.155482054 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.155656099 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.155714989 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.156053066 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.156058073 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.156063080 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.156075954 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.173937082 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.174545050 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.174582005 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.175566912 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.175574064 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.218626022 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.219134092 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.219175100 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.219543934 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.219547987 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.252630949 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.253150940 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.253211021 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.253442049 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.253456116 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.264276028 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.264441967 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.264494896 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.264647961 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.264667034 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.264676094 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.264682055 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.264764071 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.264918089 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.264993906 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.265396118 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.265445948 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.265480995 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.265501976 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.268121958 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.268157959 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.268213987 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.268220901 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.268266916 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.268337965 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.268421888 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.268438101 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.268510103 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.268527985 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.271197081 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.271272898 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.271318913 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.271399021 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.271418095 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.271435022 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.271441936 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.273329020 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.273369074 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.273431063 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.273549080 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.273566008 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.327167988 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.327297926 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.327347040 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.327413082 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.327413082 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.327419996 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.327426910 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.329173088 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.329194069 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.329247952 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.329372883 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.329384089 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.384730101 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.384857893 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.384931087 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.385008097 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.385046959 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.385085106 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.385102034 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.386751890 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.386778116 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.386832952 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.386974096 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.386986017 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.911240101 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.911878109 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.911957979 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.912372112 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.912386894 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.935899019 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.936290026 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.936312914 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.936722994 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.936737061 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.942828894 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.943433046 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.943450928 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.943610907 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.943628073 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.983156919 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.983761072 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.983761072 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:36.983767986 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:36.983779907 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.009845972 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.009918928 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.010135889 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.010135889 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.010189056 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.010220051 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.012953997 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.013062000 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.013240099 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.013305902 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.013324022 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.047291040 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.047452927 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.047533989 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.047533989 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.047564030 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.047576904 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.049431086 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.049472094 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.049495935 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.049505949 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.049577951 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.049581051 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.049746990 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.049750090 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.049762964 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.049773932 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.049794912 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.049808979 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.051553011 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.051590919 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.051775932 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.051775932 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.051799059 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.059051991 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.059739113 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.059739113 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.059746981 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.059755087 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.089508057 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.089654922 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.089797020 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.089797020 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.090082884 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.090089083 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.091787100 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.091876030 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.092012882 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.092089891 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.092113018 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.162511110 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.162661076 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.162812948 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.162812948 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.162951946 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.162961006 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.164597988 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.164685965 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:37.164904118 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.164905071 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:37.164989948 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.615767002 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.616422892 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.616485119 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.617029905 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.617122889 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.617137909 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.617481947 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.617541075 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.617881060 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.617901087 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.618786097 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.619131088 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.619163036 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.619463921 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.619473934 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.619482994 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.619780064 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.619801998 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.620063066 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.620068073 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.715624094 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.715780973 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.715856075 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.716450930 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.716497898 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.716526985 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.716542959 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.717525005 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.717677116 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.717751980 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.717969894 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.718015909 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.718045950 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.718061924 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.718189955 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.718343019 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.718403101 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.718991041 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.719007015 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.719028950 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.719038963 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.719821930 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.719965935 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.720019102 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.720510960 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.720526934 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.720537901 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.720541954 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.721735001 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.721824884 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.721910000 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.722429991 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.722501040 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.722570896 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.722964048 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.722999096 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.723047018 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.723135948 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.723166943 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.723201990 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.723215103 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.723279953 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.723299980 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.724176884 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.724200964 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.724266052 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.724340916 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.724354982 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.808738947 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.809271097 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.809314013 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.810085058 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.810096979 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.916357994 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.916426897 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.916486025 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.916668892 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.916691065 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.918930054 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.918951035 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:38.919018984 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.919208050 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:38.919220924 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.236221075 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.237097979 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.237112999 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.238552094 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.238557100 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.239223003 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.239720106 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.239780903 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.240670919 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.240684032 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.340094090 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.340240002 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.340306044 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.340517044 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.340517044 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.340536118 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.340542078 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.342039108 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.342166901 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.342235088 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.344197989 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.344247103 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.344279051 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.344295025 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.351433039 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.351478100 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.351561069 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.352622986 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.352710962 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.352787971 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.352935076 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.352965117 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.353656054 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.353688955 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.423165083 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.423834085 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.423901081 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.424120903 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.425091028 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.425107002 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.425862074 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.425874949 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.426897049 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.426970959 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.426975012 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.427448988 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.427484035 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.427905083 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.427916050 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.523355007 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.523521900 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.523585081 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.524000883 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.524043083 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.524069071 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.524085045 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.526273966 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.526478052 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.526526928 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.526952982 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.526973963 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.526983023 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.526988983 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.529252052 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.529392004 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.529453039 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.530728102 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.530775070 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.530805111 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.530819893 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.536606073 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.536659956 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.536717892 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.537887096 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.537898064 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.537947893 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.539870977 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.539964914 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.540036917 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.540405035 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.540421009 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.540813923 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.540824890 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.541095018 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:40.541130066 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:40.998038054 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.002149105 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.002233028 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.002757072 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.002809048 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.030039072 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.030456066 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.030533075 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.030813932 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.030828953 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.098678112 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.098830938 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.098972082 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.098972082 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.099772930 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.099817991 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.101622105 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.101707935 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.101870060 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.101942062 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.101960897 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.146960974 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.147119999 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.147258997 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.147361994 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.147361994 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.147433996 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.147469044 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.150202990 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.150290012 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.150799990 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.151046038 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.151073933 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.187513113 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.188026905 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.188056946 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.190177917 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.190186024 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.197597027 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.198039055 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.198096991 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.198935986 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.198950052 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.213709116 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.214297056 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.214314938 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.215369940 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.215373993 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.287786961 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.287919998 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.288033962 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.288168907 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.288182974 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.291703939 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.291795969 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.292117119 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.292117119 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.292200089 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.299216032 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.299365044 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.302026033 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.302275896 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.302275896 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.302309036 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.302329063 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.306178093 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.306265116 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.306423903 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.306746960 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.306782007 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.317486048 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.317620993 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.317692041 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.317821980 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.317842007 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.317895889 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.317904949 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.323043108 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.323102951 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.324059010 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.324326038 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.324357033 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.754815102 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.756035089 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.756074905 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.758224010 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.758235931 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.825231075 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.826049089 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.826107979 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:41.827052116 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:41.827066898 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.076247931 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.076431990 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.076502085 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.076598883 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.076598883 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.076646090 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.076673985 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.078258038 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.078684092 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.078707933 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.079106092 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.079152107 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.079205990 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.079305887 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.079313040 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.079458952 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.079473019 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.082922935 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.083108902 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.083245993 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.083268881 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.083447933 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.083507061 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.083745003 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.083760023 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.083842039 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.083854914 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.168081999 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.168229103 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.168294907 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.168345928 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.168374062 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.168405056 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.168418884 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.170789957 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.170820951 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.170880079 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.171045065 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.171062946 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.187649012 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.187796116 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.187860012 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.187930107 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.187930107 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.187969923 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.187994957 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.188210011 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.188260078 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.188292980 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.188328981 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.188402891 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.188438892 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.188465118 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.188479900 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.188604116 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.188659906 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.188837051 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.188837051 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.188852072 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.188870907 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.191091061 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.191150904 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.191184998 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.191203117 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.191227913 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.191273928 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.191355944 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.191376925 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.191442966 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.191466093 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.195687056 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.195714951 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.195781946 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.195878983 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.195892096 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.750550985 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.751101971 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.751122952 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.752161026 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.752165079 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.841254950 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.842408895 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.842427015 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.843485117 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.843487978 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.849992037 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.851130962 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.851175070 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.851541042 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.851675987 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.851726055 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.851874113 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.851886988 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.852639914 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.852653980 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.859848976 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.859869957 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.859929085 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.860054016 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.860061884 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.879774094 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.880321980 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.880336046 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.881052017 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.881057978 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.881454945 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.882160902 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.882175922 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.882858038 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.882862091 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.938719034 CEST	443	49786	142.250.184.196	192.168.2.4
Oct 11, 2024 14:00:42.938851118 CEST	443	49786	142.250.184.196	192.168.2.4
Oct 11, 2024 14:00:42.938915014 CEST	49786	443	192.168.2.4	142.250.184.196
Oct 11, 2024 14:00:42.941915989 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.942059040 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.942111015 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.942729950 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.942740917 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.942750931 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.942754030 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.950181961 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.950244904 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.950486898 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.951878071 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.951910019 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.962192059 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.962271929 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.962472916 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.962515116 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.962515116 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.962538958 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.962559938 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.966177940 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.966247082 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.966450930 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.968539000 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.968569040 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.985178947 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.985308886 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.985418081 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.985681057 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.985697985 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.985729933 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.985743046 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.988250971 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.988323927 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:42.988498926 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.988498926 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:42.988564968 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.069843054 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.070004940 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.070161104 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.070349932 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.070349932 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.070364952 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.070373058 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.072460890 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.072496891 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.074270964 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.075177908 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.075206995 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.522078037 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.523071051 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.523071051 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.523101091 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.523109913 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.622893095 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.623028994 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.623203993 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.623203993 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.623311996 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.623328924 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.625969887 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.626059055 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.626179934 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.626317978 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.626358986 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.635544062 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.636317015 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.636317015 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.636368990 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.636415005 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.638906002 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.639432907 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.639516115 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.639548063 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.639564991 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.652242899 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.652590990 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.652616024 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.652961969 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.652977943 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.752733946 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.752892017 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.753348112 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.753401041 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.753531933 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.754184961 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.756793976 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.758523941 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.758523941 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.758564949 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.758586884 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.760627031 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.760706902 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.762419939 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.767184973 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.767184973 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.767219067 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.767241001 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.769942999 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.769942999 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.769996881 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.770021915 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.771951914 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.771951914 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.771975040 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.772013903 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.784523010 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.784533024 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.784614086 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.784631014 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.784666061 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.784687042 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.784717083 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.784723997 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.784837008 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.784837008 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.784890890 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.784931898 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.784935951 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:43.784962893 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.784966946 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:43.889911890 CEST	49786	443	192.168.2.4	142.250.184.196
Oct 11, 2024 14:00:43.889962912 CEST	443	49786	142.250.184.196	192.168.2.4
Oct 11, 2024 14:00:44.028822899 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.029000044 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.029057980 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.029378891 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.029414892 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.029433966 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.029441118 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.034362078 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.034410954 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.034487009 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.034848928 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.034877062 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.268546104 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.269102097 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.269125938 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.269716978 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.269723892 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.380170107 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.380306959 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.380372047 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.380640984 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.380681992 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.380708933 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.380723953 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.383615017 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.383697987 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.383783102 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.383903980 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.383925915 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.421516895 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.421984911 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.422030926 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.422389030 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.422403097 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.444664001 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.445139885 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.445194006 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.445542097 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.445559978 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.448970079 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.449276924 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.449291945 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.449794054 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.449804068 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.528944016 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.529030085 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.529087067 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.529263973 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.529263973 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.529304028 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.529326916 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.532157898 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.532191992 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.532254934 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.532423019 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.532434940 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.544915915 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.545085907 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.545161009 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.545248032 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.545248032 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.545290947 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.545317888 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.547251940 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.547260046 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.547313929 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.547467947 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.547481060 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.551776886 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.551856041 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.551903963 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.551955938 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.551968098 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.552021980 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.552036047 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.553730965 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.553791046 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.553858995 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.553998947 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.554025888 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.710912943 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.711291075 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.711323977 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.711739063 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.711750984 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.814611912 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.814687967 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.814745903 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.814874887 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.814905882 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.814932108 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.814945936 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.817487955 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.817590952 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:44.817657948 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.817797899 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:44.817836046 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.024810076 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.025754929 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.025754929 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.025793076 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.025829077 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.123653889 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.123684883 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.123882055 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.123909950 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.124012947 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.124108076 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.124108076 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.124130964 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.124151945 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.127471924 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.127531052 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.127841949 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.127841949 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.127886057 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.174043894 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.174587011 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.174606085 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.175064087 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.175076008 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.186791897 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.187455893 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.187455893 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.187469959 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.187484026 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.216805935 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.217420101 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.217421055 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.217453957 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.217493057 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.274393082 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.274463892 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.274641037 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.274672031 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.274672031 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.274686098 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.274693012 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.277302980 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.277357101 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.277573109 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.277573109 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.277611971 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.286365032 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.286501884 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.286621094 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.286621094 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.286791086 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.286794901 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.288580894 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.288676023 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.288868904 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.288868904 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.288949966 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.320609093 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.320631027 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.320709944 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.320782900 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.320782900 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.320926905 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.320926905 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.320969105 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.320992947 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.323124886 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.323168993 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.323333025 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.323404074 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.323412895 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.459336996 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.459729910 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.459778070 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.460129023 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.460139990 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.558516026 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.558553934 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.558681965 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.558706045 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.558779001 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.558836937 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.558836937 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.558867931 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.558891058 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.561203957 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.561245918 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.561561108 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.561561108 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.561598063 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.929387093 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.930174112 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.930203915 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.930337906 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.930344105 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.944322109 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.944717884 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.944777966 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.945008039 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.945020914 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.968091011 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.968400002 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.968426943 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:45.968714952 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:45.968722105 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.031984091 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.033005953 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.033056974 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.033104897 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.033126116 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.033143044 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.033149958 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.035645962 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.035682917 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.035751104 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.035928011 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.035942078 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.045413017 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.046549082 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.046611071 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.046665907 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.046665907 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.046700001 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.046720982 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.048719883 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.048757076 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.048902035 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.049032927 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.049046040 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.068526983 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.068584919 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.068711996 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.068742990 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.068757057 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.068769932 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.068774939 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.070724964 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.070754051 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.070844889 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.070945978 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.070957899 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.119512081 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.120014906 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.120040894 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.120441914 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.120448112 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.219351053 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.219973087 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.220043898 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.220168114 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.220191956 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.220205069 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.220212936 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.224112988 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.224175930 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.224258900 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.224468946 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.224498034 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.618876934 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.619438887 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.619498014 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.619832039 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.619846106 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.700412989 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.700767994 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.700799942 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.701206923 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.701212883 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.707104921 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.707428932 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.707443953 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.707809925 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.707814932 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.709387064 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.709697008 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.709714890 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.710110903 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.710117102 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.716511011 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.716541052 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.716603041 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.716636896 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.716768980 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.716768980 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.716798067 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.716963053 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.716993093 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.717036009 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.719429016 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.719517946 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.719587088 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.719750881 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.719779015 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.806298018 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.806437016 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.806538105 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.806679964 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.806703091 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.806719065 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.806725979 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.809442043 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.809484959 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.809616089 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.809777975 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.809792995 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.812206984 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.812282085 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.812375069 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.812407970 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.812419891 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.812431097 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.812437057 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.814485073 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.814533949 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.814599991 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.814738035 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.814749956 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.819200039 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.819278002 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.819344997 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.819422960 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.819436073 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.819472075 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.819478989 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.821381092 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.821470022 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.821547031 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.821656942 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.821693897 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.871120930 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.871495008 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.871578932 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.871892929 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.871906042 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.969747066 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.969862938 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.970077038 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.970077991 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.970077991 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.972919941 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.973017931 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:46.973303080 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.973304033 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:46.973390102 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.278295040 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.278368950 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.513243914 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.514043093 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.514133930 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.514233112 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.514246941 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.610383034 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.611391068 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.611392021 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.611432076 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.611457109 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.617078066 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.617671967 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.617873907 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.617873907 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.617873907 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.621140957 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.621181011 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.621403933 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.621403933 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.621431112 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.694870949 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.695347071 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.695363998 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.695820093 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.695827007 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.702645063 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.702872038 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.703047991 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.703082085 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.703610897 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.703619957 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.704004049 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.704013109 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.704164982 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.704169035 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.713574886 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.713644981 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.713985920 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.713985920 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.714020967 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.714039087 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.717104912 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.717149973 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.718339920 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.718339920 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.718375921 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.794519901 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.794543028 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.794588089 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.794616938 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.794838905 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.794840097 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.794862986 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.794892073 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.794898987 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.797614098 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.797708988 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.797956944 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.797956944 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.798034906 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.805620909 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.805706024 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.805794001 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.805932045 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.805953026 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.805979967 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.805988073 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.808243990 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.808285952 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.808734894 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.808736086 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.808811903 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.816344023 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.816560984 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.818325043 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.818325043 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.818866014 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.818886042 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.820202112 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.820235968 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.822212934 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.822312117 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.822328091 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:47.920996904 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:47.921068907 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.369952917 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.371138096 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.371138096 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.371156931 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.371205091 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.432696104 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.433304071 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.433398962 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.433625937 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.433641911 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.458240032 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.458890915 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.458962917 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.459146976 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.459161043 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.470544100 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.470679045 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.470784903 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.470871925 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.470885992 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.470928907 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.470946074 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.473798990 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.473835945 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.473920107 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.474030018 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.474037886 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.483823061 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.484147072 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.484157085 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.484524965 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.484529018 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.490381956 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.490724087 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.490732908 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.491408110 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.491411924 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.531615973 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.531876087 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.532064915 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.532064915 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.532066107 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.534473896 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.534532070 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.534609079 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.534778118 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.534791946 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.559315920 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.559753895 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.559953928 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.559953928 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.559953928 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.561830997 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.561878920 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.561944008 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.562123060 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.562141895 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.582437992 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.582509995 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.582617044 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.582617998 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.582673073 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.582714081 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.582725048 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.582732916 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.582736969 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.584383011 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.584403038 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.584544897 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.584662914 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.584676027 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.592884064 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.592955112 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.593009949 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.593028069 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.593065023 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.593110085 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.593188047 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.593188047 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.593200922 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.593208075 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.594978094 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.595069885 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.595168114 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.595280886 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.595305920 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.840523005 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.840596914 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:48.872416973 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:48.872482061 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.161860943 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.162375927 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.162403107 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.163063049 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.163068056 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.187649965 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.188083887 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.188119888 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.188548088 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.188558102 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.239681959 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.240019083 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.240056992 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.240421057 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.240428925 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.242580891 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.242976904 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.243012905 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.243451118 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.243458986 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.263871908 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.264014959 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.264081955 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.264355898 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.264355898 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.264395952 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.264431953 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.267431974 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.267477036 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.267543077 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.267726898 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.267745018 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.289247036 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.289285898 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.289334059 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.289484978 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.289510965 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.289525986 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.289532900 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.291575909 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.291610956 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.291666031 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.291935921 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.291951895 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.340255022 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.340321064 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.340421915 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.340498924 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.340603113 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.340651035 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.340679884 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.340696096 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.342099905 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.342261076 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.342374086 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.343014002 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.343041897 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.343061924 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.343069077 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.344980955 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.345067978 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.345185995 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.345222950 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.345247984 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.345285892 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.345438957 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.345458031 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.345472097 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.345477104 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.855806112 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.856395960 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.856457949 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.857325077 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.857378006 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.925540924 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.926085949 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.926136017 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.926856995 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.926868916 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.933293104 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.933744907 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.933770895 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.934125900 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.934135914 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.956593037 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.956964970 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.957180977 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.957181931 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.957181931 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.960628986 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.960670948 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:49.960738897 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.960916996 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:49.960927963 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.009829044 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.010365963 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.010452032 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.010926008 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.010979891 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.023860931 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.023998976 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.024111986 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.024111986 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.026186943 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.026201963 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.026709080 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.026746035 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.026968002 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.026968002 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.027004004 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.036068916 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.036134005 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.036228895 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.036360979 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.036360979 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.036931992 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.036963940 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.038569927 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.038615942 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 11, 2024 14:00:50.038856030 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.038856030 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 11, 2024 14:00:50.038889885 CEST	443	49871	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 13:59:27.769009113 CEST	53	64428	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:27.777586937 CEST	53	50393	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:28.950592995 CEST	53	64527	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:29.224328041 CEST	60320	53	192.168.2.4	1.1.1.1
Oct 11, 2024 13:59:29.224554062 CEST	60373	53	192.168.2.4	1.1.1.1
Oct 11, 2024 13:59:29.248471022 CEST	53	60320	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:29.270596981 CEST	53	60373	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:30.174467087 CEST	54848	53	192.168.2.4	1.1.1.1
Oct 11, 2024 13:59:30.174607038 CEST	54007	53	192.168.2.4	1.1.1.1
Oct 11, 2024 13:59:31.655069113 CEST	50842	53	192.168.2.4	1.1.1.1
Oct 11, 2024 13:59:31.655407906 CEST	54379	53	192.168.2.4	1.1.1.1
Oct 11, 2024 13:59:31.662220955 CEST	53	50842	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:31.662257910 CEST	53	54379	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:31.879553080 CEST	60403	53	192.168.2.4	1.1.1.1
Oct 11, 2024 13:59:31.880181074 CEST	62795	53	192.168.2.4	1.1.1.1
Oct 11, 2024 13:59:31.888942003 CEST	53	60403	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:31.889388084 CEST	53	62795	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:31.949661016 CEST	53	55799	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:32.507425070 CEST	53089	53	192.168.2.4	1.1.1.1
Oct 11, 2024 13:59:32.507616997 CEST	61759	53	192.168.2.4	1.1.1.1
Oct 11, 2024 13:59:32.514852047 CEST	53	61759	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:32.515081882 CEST	53	53089	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:45.943438053 CEST	53	62849	1.1.1.1	192.168.2.4
Oct 11, 2024 13:59:48.312463999 CEST	138	138	192.168.2.4	192.168.2.255
Oct 11, 2024 14:00:04.842762947 CEST	53	57202	1.1.1.1	192.168.2.4
Oct 11, 2024 14:00:26.867213011 CEST	53	61051	1.1.1.1	192.168.2.4
Oct 11, 2024 14:00:28.155621052 CEST	53	63057	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 11, 2024 13:59:29.270719051 CEST	192.168.2.4	1.1.1.1	c253	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 11, 2024 13:59:29.224328041 CEST	192.168.2.4	1.1.1.1	0x1fc8	Standard query (0)	lawrence-tours.email-provider.eu	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:29.224554062 CEST	192.168.2.4	1.1.1.1	0x4112	Standard query (0)	lawrence-tours.email-provider.eu	65	IN (0x0001)	false
Oct 11, 2024 13:59:30.174467087 CEST	192.168.2.4	1.1.1.1	0x4626	Standard query (0)	ctrk.klclick3.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:30.174607038 CEST	192.168.2.4	1.1.1.1	0xdaba	Standard query (0)	ctrk.klclick3.com	65	IN (0x0001)	false
Oct 11, 2024 13:59:31.655069113 CEST	192.168.2.4	1.1.1.1	0x1011	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:31.655407906 CEST	192.168.2.4	1.1.1.1	0x2181	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 11, 2024 13:59:31.879553080 CEST	192.168.2.4	1.1.1.1	0x399	Standard query (0)	i.pcmag.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:31.880181074 CEST	192.168.2.4	1.1.1.1	0x44b	Standard query (0)	i.pcmag.com	65	IN (0x0001)	false
Oct 11, 2024 13:59:32.507425070 CEST	192.168.2.4	1.1.1.1	0x71f2	Standard query (0)	i.pcmag.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:32.507616997 CEST	192.168.2.4	1.1.1.1	0xff6f	Standard query (0)	i.pcmag.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 11, 2024 13:59:29.248471022 CEST	1.1.1.1	192.168.2.4	0x1fc8	No error (0)	lawrence-tours.email-provider.eu		213.154.235.49	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:30.181413889 CEST	1.1.1.1	192.168.2.4	0x4626	No error (0)	ctrk.klclick3.com	cloudflare.klaviyodns.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 13:59:30.182193995 CEST	1.1.1.1	192.168.2.4	0xdaba	No error (0)	ctrk.klclick3.com	cloudflare.klaviyodns.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 13:59:31.662220955 CEST	1.1.1.1	192.168.2.4	0x1011	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:31.662257910 CEST	1.1.1.1	192.168.2.4	0x2181	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 11, 2024 13:59:31.888942003 CEST	1.1.1.1	192.168.2.4	0x399	No error (0)	i.pcmag.com		104.16.20.118	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:31.888942003 CEST	1.1.1.1	192.168.2.4	0x399	No error (0)	i.pcmag.com		104.16.21.118	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:31.889388084 CEST	1.1.1.1	192.168.2.4	0x44b	No error (0)	i.pcmag.com			65	IN (0x0001)	false
Oct 11, 2024 13:59:32.514852047 CEST	1.1.1.1	192.168.2.4	0xff6f	No error (0)	i.pcmag.com			65	IN (0x0001)	false
Oct 11, 2024 13:59:32.515081882 CEST	1.1.1.1	192.168.2.4	0x71f2	No error (0)	i.pcmag.com		104.16.20.118	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:32.515081882 CEST	1.1.1.1	192.168.2.4	0x71f2	No error (0)	i.pcmag.com		104.16.21.118	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:42.591801882 CEST	1.1.1.1	192.168.2.4	0x8f6b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 13:59:42.591801882 CEST	1.1.1.1	192.168.2.4	0x8f6b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 11, 2024 13:59:55.614217997 CEST	1.1.1.1	192.168.2.4	0x39cd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 13:59:55.614217997 CEST	1.1.1.1	192.168.2.4	0x39cd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 11, 2024 14:00:24.457367897 CEST	1.1.1.1	192.168.2.4	0x32f6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 14:00:24.457367897 CEST	1.1.1.1	192.168.2.4	0x32f6	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 11, 2024 14:00:40.725811958 CEST	1.1.1.1	192.168.2.4	0x5449	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 14:00:40.725811958 CEST	1.1.1.1	192.168.2.4	0x5449	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

lawrence-tours.email-provider.eu

https:

i.pcmag.com

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	213.154.235.49	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 11:59:29 UTC	734	OUT	GET /link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4 HTTP/1.1 Host: lawrence-tours.email-provider.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 11:59:30 UTC	404	IN	HTTP/1.1 302 Found Date: Fri, 11 Oct 2024 11:59:30 GMT Server: Apache Location: https://ctrk.klclick3.com/l/01J9WGWZ3CDDHQ7S33XVYM6366_1 Strict-Transport-Security: max-age=31536000;preload; X-XSS-Protection: 1 Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 Set-Cookie: BIGipServerLAPOZ-laposta-http-v4=357569290.20480.0000; path=/; Httponly; Secure; SameSite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	104.16.20.118	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 11:59:32 UTC	673	OUT	GET /imagery/reviews/07LERcQBRVgcVKystB3aGUU-11.fit_scale.size_1028x578.v1569471957.jpg HTTP/1.1 Host: i.pcmag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://filesceodoc.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 11:59:32 UTC	642	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 11:59:32 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 Cf-Bgj: imgq:85,h2pri Cf-Polished: qual=85, origFmt=jpeg, origSize=107239 Content-Disposition: inline; filename="07LERcQBRVgcVKystB3aGUU-11.webp" Strict-Transport-Security: max-age=15724800; includeSubDomains Vary: Accept Last-Modified: Thu, 10 Oct 2024 06:42:00 GMT CF-Cache-Status: HIT Age: 11922 Expires: Sat, 11 Oct 2025 11:59:32 GMT Referrer-Policy: no-referrer-when-downgrade Server: cloudflare CF-RAY: 8d0eaf43ca5c43e7-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 11:59:32 UTC	727	IN	Data Raw: 33 62 38 63 0d 0a 52 49 46 46 84 3b 00 00 57 45 42 50 56 50 38 20 78 3b 00 00 f0 3b 01 9d 01 2a 03 04 42 02 3e 49 24 91 46 22 a2 22 21 21 b3 18 f0 50 09 09 65 6e e1 75 ee 87 f2 ba 98 61 ef 7e 23 fb 37 ed f7 82 bc 6b dc 5f af 7f 6d fd 96 fe e1 fb 8b f3 67 59 fe 9d fd eb f3 e7 f5 1f da fe 86 db 0f cc 37 c6 ff 45 ff 51 fd ef fc af ed 27 ce 8f ed df d6 7f b2 fe 29 7d 13 fc e9 fd cf fc 07 ef ff d0 07 f1 cf e5 1f e9 ff c1 7f 7c fd 90 f8 88 ff 7b fe d3 dc c7 ed 97 fb 7f 60 1f d0 bf b4 7e b9 7b c1 ff 86 ff c7 fd c7 dc 8f f9 2f f1 1f f7 bf bb 7f 8e f9 00 fe a5 fe 67 ff 2f ee d7 bd d7 ff ff 72 2f dc bf ff fe e1 7f cb bf da 7f fc f5 ca fd c7 ff c3 f2 a5 fd 3b fd e7 ed a7 fc af 79 2f ff ff bc 9f 00 1f ff fd b7 7f 80 7f ff eb 6f ea 4f f8 5f ec 3f b3 fe f9 fb ec fb bf Data Ascii: 3b8cRIFF;WEBPVP8 x;;*B>I$F""!!Penua~#7k_mgY7EQ')}\|{`~{/g/r/;y/oO_?
2024-10-11 11:59:32 UTC	1369	IN	Data Raw: 3c da ee 03 ae 1a cc 03 d4 c5 41 53 9b 5d c0 7a 98 a8 2a 73 6b b8 0f 53 13 38 f1 58 be e1 8f 5c 54 f0 9c 81 04 03 c7 fc 75 c1 f6 fa 2b 7f 01 f7 ad fc f8 3e 5e 05 38 4e 0e 7a b4 35 5c 34 cf 86 39 5f a7 c8 4a b5 00 fe 0e 8d 1e 53 9b 59 41 49 f5 d3 e7 de 0b e4 14 af e2 b1 0d 8b 5a 7d c3 61 44 75 27 20 a9 cd ad 96 7d c5 aa e1 48 6b b1 0a c0 a0 df 55 3f 55 1e cb 5a d8 49 9a cc a7 f6 11 4d 1d 2b d7 96 59 28 f0 c1 eb 89 9c c0 60 1e e3 8c 74 59 4d 94 6a 4a 8c 54 48 d3 2b 1b 67 01 20 90 03 7a be 9e a9 5c 8f 36 7d e0 59 9f 0b 1f 73 f7 c1 1f a5 87 8c a0 00 61 88 80 f0 74 a3 9c e3 00 ec c7 aa 51 b6 e7 b3 3c 61 a4 56 c0 ab 01 8d 21 2e c8 3b 24 ad 43 79 b0 3b 5c af 36 0f e2 76 8c 40 a8 2a 73 6b b8 05 98 8f 8d fe 3f c0 87 79 eb 0c 9a 69 dc 51 8a 6b 28 97 72 53 a9 e7 b1 Data Ascii: <AS]zskS8X\Tu+>^8Nz5\49_JSYAIZ}aDu' }HkU?UZIM+Y(`tYMjJTH+g z\6}YsatQ<aV!.;$Cy;\6v@sk?yiQk(rS
2024-10-11 11:59:32 UTC	1369	IN	Data Raw: 51 57 2a 3f 4c f6 eb b6 e0 90 0a d1 f3 69 7d cb 8c 84 a1 4a 5d 71 19 5f b8 2f c0 30 1c 88 82 92 cc d0 2c 7c 81 70 b6 13 2c 63 20 24 60 5b a0 6f a1 bf f1 b7 e6 d7 70 1e a6 2a 0a 9c da ee 03 d0 2e 76 9a 66 94 c2 52 6f b8 b9 aa e4 76 1e 3b b0 7f c8 24 5c 83 56 4a 82 a7 36 bb 80 f5 3a 9d 0a 82 a7 36 bb 80 f5 31 50 54 e6 d7 70 1e a6 2f cc 7f fc 40 28 be d9 ec 77 c9 cf f0 1e b8 84 05 aa 63 d6 9b 6c e6 12 5d c0 7a 98 a8 2a 73 6b b8 0f 53 15 05 4e 6d 77 01 ea 62 a0 a9 cd ae e0 3d 4c 54 f9 88 d1 b1 40 9a c0 af 51 36 88 74 74 79 39 05 4e 6d 77 01 ea 62 a0 a9 cd ae e0 3d 4c 54 15 39 b5 dc 07 a9 8a 82 a7 36 bb a4 fa 98 a8 2a 73 6b b8 0f 53 15 05 4e 6d 77 01 ea 62 a0 a9 cd ae e0 3d 4c 54 15 39 b5 dc 07 a9 8a 82 a7 36 bb 80 f5 31 50 54 e6 d7 70 1e a6 2a 0a 9c da ee 03 Data Ascii: QW?Li}J]q_/0,\|p,c $`[op.vfRov;$\VJ6:61PTp/@(wcl]zskSNmwb=LT@Q6tty9Nmwb=LT96skSNmwb=LT961PTp*
2024-10-11 11:59:32 UTC	1369	IN	Data Raw: 11 a6 37 7e 00 5c af f5 b5 b5 85 ca 1d 39 1d 9e 7b 09 e9 4b 00 c5 b7 83 34 12 6f 10 46 7e fa b4 b8 15 e5 ed 04 20 04 c0 92 aa b3 2a 79 9d 65 36 9f c8 a3 a0 03 23 b6 50 e7 51 6b 1d 04 04 39 ff bd ab 81 5a 52 6a 05 30 bc 27 1d 0b 76 1c 28 0e 52 83 fb ad b9 bd 7e 42 e1 7d a3 43 4c cd 49 8d 03 53 c6 19 08 97 ad 12 5d 38 17 83 9a 44 13 21 8f 7c ec f6 63 55 87 7c 99 86 b9 2b d6 41 97 f4 a7 24 83 45 87 82 ae 08 5a 69 17 2b 45 8d 99 da e7 30 89 62 81 f5 63 50 05 81 29 c2 a5 f8 0f e3 99 b6 ce e2 81 3f 8b 4d 1a 38 c2 51 11 2c cd 95 9a a0 d4 49 17 5e c0 26 a3 4b d4 95 7e 8f 31 e3 60 39 8d 4b 6a 78 14 fe 14 53 de bd d4 ae 78 61 af e7 55 f7 99 5f 59 8b 4b a3 a0 53 b9 2f 9a c1 6a ed 22 ab ea d0 0b 77 a6 88 50 08 03 ee c9 bd 6a d8 d0 49 c9 8d b7 db eb d0 99 36 4a 5b 31 Data Ascii: 7~\9{K4oF~ *ye6#PQk9ZRj0'v(R~B}CLIS]8D!\|cU\|+A$EZi+E0bcP)?M8Q,I^&K~1`9KjxSxaU_YKS/j"wPjI6J[1
2024-10-11 11:59:32 UTC	1369	IN	Data Raw: 6f dd 75 73 3d 55 65 f6 a8 80 33 23 c4 44 02 57 32 d5 7a b9 43 aa da d6 61 1c 2e e3 d1 f3 4f 60 b4 63 3d 68 8a 13 37 bd 32 1a b8 fd b4 d2 e5 03 96 84 52 3e a8 1d dc 51 4a 9d cb 46 af 75 c7 b9 37 d5 2e f7 68 49 20 cc 5c 30 8a 92 76 a1 80 c6 62 c9 5d 8f 28 63 b9 c6 09 f7 60 01 35 76 ee b6 02 e6 d4 7c 1b 9a 01 aa 1a ff bd 39 c3 ce ce 83 9d 0f 8d 7e 37 08 98 cd 6f c4 b9 22 22 d2 06 35 4f 88 c0 41 4c a9 a8 8d d0 fe 90 25 5a b2 85 7c c5 36 1b c2 68 8d 8d 79 09 fc 5e de 1f bb 65 aa a0 fd 70 78 d4 b8 25 df 34 84 c3 d8 74 04 4a ed ba 3c 36 fe d3 7f 5d 79 8b 81 04 87 24 af 4e e4 40 91 03 d2 43 fd 79 48 1e fd c6 80 23 6b 3e 00 e0 be c0 1e c5 1c 61 4f e1 6c 83 43 a9 f1 27 2a e3 eb 30 c1 ab c9 01 9b 02 fb b6 8c 99 99 e7 c8 84 92 da e3 9b a0 f7 28 43 05 54 fc 48 93 e5 Data Ascii: ous=Ue3#DW2zCa.O`c=h72R>QJFu7.hI \0vb](c`5v\|9~7o""5OAL%Z\|6hy^epx%4tJ<6]y$N@CyH#k>aOlC'*0(CTH
2024-10-11 11:59:32 UTC	1369	IN	Data Raw: b9 00 d3 a4 cd 46 7c 07 0b 1a 15 59 5c 47 e1 99 b1 b8 2a d8 17 29 49 4f 6d 79 ce 76 73 a6 2f be 8a 00 87 e4 46 04 c6 4e cc d8 e6 e8 a4 66 e3 69 8e 60 aa f7 cc c0 1c 6b 2c 58 e3 54 29 19 8c 5d ae 7a fc c6 7a 20 92 df 4a d3 5f 27 77 b5 1a 11 57 51 22 69 5f 51 70 43 11 8e 78 ab 99 20 a8 94 ca 9a 2c df c3 3e 46 a9 35 61 1a 73 43 a1 38 5f 9b be 1d 79 cf 03 fe 6a bf 1e b8 d2 c9 d1 2a f1 b6 2e 31 2d f6 42 97 de 45 6a 08 ce bf 56 23 90 ea 26 08 68 e9 05 51 5c 36 76 22 3b f7 5f b2 09 16 be fc 98 80 68 56 8c ea 9c cb 84 bf 5c e0 a4 f0 56 ae d9 0d 4f 21 ee 4d e9 72 a3 cc 4c da 2b d7 66 28 fa d6 77 91 72 e4 f4 c5 f9 2a 88 a0 32 95 dc 81 a0 b9 14 fa 8d 33 07 01 65 a8 15 4c ff d4 df 9c 59 74 10 ea d3 10 64 58 0c 6f 65 8f ad 2d 48 40 a9 ee 02 e8 4d 7f f3 01 0e c3 00 bf Data Ascii: F\|Y\G)IOmyvs/FNfi`k,XT)]zz J_'wWQ"i_QpCx ,>F5asC8_yj.1-BEjV#&hQ\6v";_hV\VO!MrL+f(wr*23eLYtdXoe-H@M
2024-10-11 11:59:32 UTC	1369	IN	Data Raw: 10 ca 9c cd df 53 f0 3e dc d7 ae 7e 3d 6b b4 ac 80 63 1d 88 c7 e0 e6 f3 e2 cf db 51 83 43 32 da 7c da 8d 8d 5e 3d a7 01 a1 fc d5 b5 29 bc 4f fa 09 a2 37 15 cb 31 19 19 50 88 63 31 3b 84 78 f5 e3 ba 41 75 15 eb d3 15 f7 75 24 34 45 be c8 b0 87 9f 6b 0b 0e 68 8c cd 87 ca 54 98 2d 2c 3d fb 7d 2e d4 02 9c dc 0f 0f 0e 24 bd 9d f7 2c 49 82 cf 00 e3 dd 27 9c ce 87 05 29 13 af 40 3d 74 8b d9 86 21 90 e7 92 60 09 9c 40 48 48 a6 91 52 8a e4 ee 89 d6 9e 96 49 96 60 06 67 cf 92 74 b7 1f 01 50 21 9e 78 0c 9c 1e 10 76 96 af 55 7b b7 1a 66 6d 18 67 5c 64 cd d7 16 89 f7 00 ba 1e 3b 1b 6f 2f 37 2f ca 17 9b 9c 2c 51 e1 6c cf aa 92 30 5a a0 d1 aa 29 d5 cb 27 1d 01 00 90 74 0b e5 07 f6 76 e6 2e 91 1f 3d 82 89 b0 3e 5e c4 f1 ca 2c 75 cb d6 7c 66 e0 a1 2b 12 7c 6e ee f3 1f 73 Data Ascii: S>~=kcQC2\|^=)O71Pc1;xAuu$4EkhT-,=}.$,I')@=t!`@HHRI`gtP!xvU{fmg\d;o/7/,Ql0Z)'tv.=>^,u\|f+\|ns
2024-10-11 11:59:32 UTC	1369	IN	Data Raw: 12 0d d9 21 fa d4 c9 82 ac 4b c1 03 5d 91 ce ff 03 f1 a2 d7 b7 e7 45 a5 7f 3d fc 1b 03 da f7 e0 9f 85 6a 98 ff a5 97 48 7d ae cc bf 0c 3f 91 6a 44 a8 c2 87 87 ac 04 fc e4 87 75 6d d2 9a 0d b0 f5 20 3d f7 36 01 70 b7 0b ac 7e 48 fe 7e 42 66 7a 77 9a 72 52 31 a4 bd 78 df 62 24 40 d1 98 42 ab dd 26 a2 cb a0 7d 55 60 0a d3 08 b3 28 d1 06 63 90 34 b4 55 8b 2e a3 7e 9a 4e ea ea 6e 2a 02 22 da d7 25 8a e8 91 ae 5d 10 8f e9 79 64 a5 01 77 40 8b 7c 74 6c ae fb cb dc 0b 2f 0d 65 78 7f d5 51 4d 59 17 dc 5c e6 3b 76 f7 d7 b0 2b 49 40 e6 23 a2 43 0b 86 96 c9 33 0b eb d2 29 c2 6c 0d 08 68 26 62 fe d8 c4 b4 61 f8 27 94 8b 8f 6c 2b da 65 eb 2d 67 d3 6b 59 44 aa 77 fd 35 32 e7 33 23 0a ca eb 71 4a 65 88 f3 11 dd 1d 00 c5 b6 5d ff 02 ce e9 5d 45 9e ad df 05 f5 a9 2d 6d e7 Data Ascii: !K]E=jH}?jDum =6p~H~BfzwrR1xb$@B&}U`(c4U.~Nn*"%]ydw@\|tl/exQMY\;v+I@#C3)lh&ba'l+e-gkYDw523#qJe]]E-m
2024-10-11 11:59:32 UTC	1369	IN	Data Raw: 2a ce c1 8e a5 90 42 bb e7 eb 64 85 48 92 37 95 1a d2 bd fd 09 e5 3b df 7e c4 2c b4 4f 82 57 55 fc c4 47 2e 00 01 19 d5 d6 b3 a7 f8 2a a2 1b a3 c5 37 c9 02 f6 d2 ba bc e6 f4 00 00 00 00 13 89 02 b2 06 d1 dc c0 57 f4 3b d5 97 e7 3f 1d 33 ad d7 80 d7 55 f1 57 e5 d7 5a 1c 38 75 6e 75 63 f3 b7 28 97 6a d1 33 e6 04 10 14 74 cf 02 7e 0a 42 d1 9c 16 98 97 11 a0 25 95 af 86 20 57 1f 75 bf b5 9d 94 ce 3b 6f a1 e0 19 89 b6 72 c2 b2 9d 86 1f 53 5f 52 1d b5 a4 68 0c 62 f6 44 41 ba a7 93 67 83 0d 04 c1 34 03 d7 ed 37 ce 24 df 4c 22 2c 18 b7 99 91 08 f8 3b 30 9e 49 06 c7 67 e6 a3 00 d6 2f bc f4 27 50 a0 31 96 fe a2 d0 e7 41 df 85 a0 84 73 7c 00 c1 6a 5a 8d dd e7 e5 14 f4 d7 ab 1d 21 45 d1 3b 40 ab e7 32 60 9c 9e 99 7a c8 b1 86 56 61 c3 e9 41 a5 22 39 9b 26 c7 d6 b5 ff Data Ascii: BdH7;~,OWUG.7W;?3UWZ8unuc(j3t~B% Wu;orS_RhbDAg47$L",;0Ig/'P1As\|jZ!E;@2`zVaA"9&
2024-10-11 11:59:32 UTC	1369	IN	Data Raw: dd ed 75 8c 55 72 41 4e ab 6e d7 2c 43 ff 5b 54 c9 0b e5 3e df 2c e5 f5 6d a1 07 3b da 19 cf 04 14 c6 88 b1 8f c2 d2 b7 d7 e1 b1 d2 dc 8a 9a d6 45 31 7c 09 0e 6d 4e 53 34 52 66 76 40 0f 9b b2 f2 49 8b cd 76 3e 73 fc ef a3 c9 b0 87 ed f3 cf 76 a7 7a 44 6a e7 83 ba 83 8e 1a c2 25 5b 15 5c b2 2e 95 72 22 c5 25 4b 75 f5 63 70 2d 13 0c 6d e2 8b eb 7a 61 7a 42 0b 38 e2 32 11 01 1f 3e b8 1c 0f 39 de ca 2d 80 b1 4b 4e 33 88 61 ad 02 b6 a6 42 d5 76 6e d1 b1 ab 92 29 de cc 5f 68 fd 32 78 fb fb 7c 8d b0 02 5c 29 0e 47 cb e8 34 1e 37 94 4a 23 28 50 ad 70 19 41 7e 45 83 a5 57 ad c5 98 03 65 6d 26 71 27 9e 3b 2c fa 7e e1 11 b9 bb 5f 4b 3f 9d b0 42 91 53 1c ef 26 9a b7 d6 d3 75 c8 b5 be ac 76 e9 45 f0 1b f7 87 d8 c5 37 64 93 de c7 98 f6 4e eb d5 d9 88 b0 30 93 81 a6 86 Data Ascii: uUrANn,C[T>,m;E1\|mNS4Rfv@Iv>svzDj%[\.r"%Kucp-mzazB82>9-KN3aBvn)_h2x\|\)G47J#(PpA~EWem&q';,~_K?BS&uvE7dN0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	104.16.20.118	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 11:59:32 UTC	417	OUT	GET /imagery/reviews/07LERcQBRVgcVKystB3aGUU-11.fit_scale.size_1028x578.v1569471957.jpg HTTP/1.1 Host: i.pcmag.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 11:59:33 UTC	557	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 11:59:33 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 Cf-Bgj: imgq:85,h2pri Cf-Polished: degrade=85, origSize=107239 Strict-Transport-Security: max-age=15724800; includeSubDomains Vary: Accept Last-Modified: Thu, 10 Oct 2024 06:42:00 GMT CF-Cache-Status: HIT Age: 5409 Expires: Sat, 11 Oct 2025 11:59:33 GMT Referrer-Policy: no-referrer-when-downgrade Server: cloudflare CF-RAY: 8d0eaf47cda88c90-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 11:59:33 UTC	812	IN	Data Raw: 36 31 35 35 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 02 42 04 03 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 01 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 08 06 07 04 05 01 02 03 09 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 01 03 04 07 02 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 b2 c0 00 00 00 00 Data Ascii: 6155JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}B"6
2024-10-11 11:59:33 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 d4 3a 02 76 02 ce c3 23 ff 00 94 d4 1d 11 84 ea d4 a4 4f 79 d2 fa a4 63 43 ef e0 00 03 00 00 58 b1 d5 8b 5e b2 ec 31 42 f4 10 00 00 00 00 00 00 00 1f 2c e3 ea f1 e7 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 70 d0 db e7 43 7a 57 98 04 a4 40 00 00 00 00 00 02 c5 8e ac 0a f5 97 64 1e 28 5e 83 e4 00 00 00 00 0e 36 71 f3 d3 da 5b 2d b6 d3 fd bd 36 ff 00 ae 18 05 07 3a ef f8 f9 1e d6 1e b8 61 3e ce 3a df 35 c3 33 38 1b 00 72 76 00 00 00 00 00 00 00 03 03 cf 34 44 8c 6f 19 aa f7 65 92 b1 d3 65 7d 06 aa d7 b2 c3 fb c5 56 54 1c f7 2c 45 4b 80 00 1d 1c a1 5e e8 4b 1d 6b 7b 76 7c 4e 5d 7e c2 1f 1b 00 Data Ascii: x:v#OycCX^1B,pCzW@d(^6q[-6:a>:538rv4Doee}VT,EK^Kk{v\|N]~
2024-10-11 11:59:33 UTC	1369	IN	Data Raw: 14 ab cc 43 4c e9 ec 62 f9 e7 d6 6a 79 a1 a9 f7 40 e3 ed 00 00 00 00 00 00 00 00 00 02 70 d0 db e7 43 7a 57 98 04 a4 40 1b 3a b9 fc f9 a9 6a 37 2d c5 f3 f6 f6 a7 dc f5 ce 8b ae 92 d1 1f 9f 7f 3b 7a 76 b6 54 35 50 9d 80 0c 00 58 b1 d5 8b 5e b2 ec 31 42 f4 10 00 e2 48 39 56 96 bc d0 bc bc 2c d5 6e ca 85 9a 3d b8 24 3f 41 7c ea cd a7 e6 fe 9c f4 f7 73 ef c1 30 ed d8 ef 8f d1 d9 6e c4 67 1f 2f a9 1f 22 d7 db 05 bb 4f 5f d8 1a f6 b8 3c e6 1a eb 62 9b 75 35 d6 c5 1a 37 32 d8 0e ae 5e 9f 1a cf 5c fd 0e a3 b7 69 dd 82 67 67 df c0 6a dc c7 f2 07 de bd 2b f2 dd e9 18 ec 13 3a f2 e0 ef 63 99 1b e7 eb 0d cc 8c e0 35 ed 00 0c 43 01 dd ae e8 fd 2b b1 72 56 3e 83 8b bb e7 ae 36 5b 7f 3f 8f 26 8e 8d 71 9c 73 dd 1c c1 cf d3 d7 e1 fb 01 d1 ce 1c fd 1c 4d 49 b9 9d 5c 9a 63 Data Ascii: CLbjy@pCzW@:j7-;zvT5PX^1BH9V,n=$?A\|s0ng/"O_<bu572^\iggj+:c5C+rV>6[?&qsMI\c
2024-10-11 11:59:33 UTC	1369	IN	Data Raw: 1d a4 39 71 69 dd e4 44 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 e1 a1 b7 c6 87 f4 af 30 09 58 80 c0 00 00 00 00 00 58 71 e5 8b 5e b2 e4 f8 2e d6 53 6e ba e7 60 fd 5a f6 06 8e 80 00 00 00 00 c4 f0 dd bc ed e1 d4 19 86 5e 3c 79 38 bb 80 c3 bb ee cd bb 40 69 df f1 c2 f3 a6 ed 1e bf 3f b3 56 ec 1f 37 f2 d9 a9 83 e7 03 8b ca 35 ed c4 7b be cd b7 48 69 df e9 84 e7 2d da 3c 79 34 ef 60 b9 d3 6e 9d 3d d8 ed 07 5f 1f 03 9e 70 48 06 3e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 0c d4 94 72 4a 32 39 c3 af 7f 9c bc 37 e7 e7 8b 63 0b 94 89 96 db ab 03 94 89 c4 5c 9e 37 6f 10 67 01 80 00 00 b1 63 ab 16 bd 65 d8 62 85 e8 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 9qiD0XXq^.Sn`Z^<y8@i?V75{Hi-<y4`n=_pH>rJ297c\7ogceb
2024-10-11 11:59:33 UTC	1369	IN	Data Raw: f2 b6 9c 75 3d 57 20 ae ad 3a e7 23 53 90 49 54 a3 a4 5b ca 47 b5 7a db c8 95 8a 6d 2f 18 f5 8b a2 e0 d5 c1 e7 f9 c7 30 6d 14 c5 b3 26 be 4d b3 2f 84 43 f7 d1 6c 28 93 6f ac 15 58 d9 27 be f7 38 f5 d1 5e d6 a1 30 78 1c 5e 59 12 4a 64 eb 5c 91 c7 87 e2 69 ff 00 1f 8f 51 59 42 d5 18 72 89 e9 f9 1e 26 ce 54 db ab e5 e6 47 87 67 50 04 b5 51 60 84 95 9a 0d a2 e4 20 26 52 90 bc b6 5f 5f 96 d6 2d ec b8 af 73 9f 7a 7a be b0 bf 78 9b 77 08 24 e1 15 50 56 e5 0a 5a fd 96 56 3c 98 52 49 57 30 0f 59 1f da 5d fb c2 cd ac 45 d8 50 be fb 38 f5 d1 5e d5 87 f0 d3 8e 46 eb ac d5 54 d6 47 1c 5c 82 d3 18 74 5c 79 59 7e 2d 47 d4 f5 55 4e 1a 44 f1 12 d1 d2 04 86 96 65 38 c1 17 cc f9 6c be bf 2d aa 54 bb 08 4a 04 73 d7 f6 1c cf 34 e9 45 91 85 1c 87 72 31 fc 63 03 99 2c 8c 14 21 Data Ascii: u=W :#SIT[Gzm/0m&M/Cl(oX'8^0x^YJd\iQYBr&TGgPQ` &R__-szzxw$PVZV<RIW0Y]EP8^FTG\t\yY~-GUNDe8l-TJs4Er1c,!
2024-10-11 11:59:33 UTC	1369	IN	Data Raw: 6b 17 14 0d 4a 8b df 26 a6 04 a4 cc ea 07 88 4e 43 08 69 db b6 ec 5b a8 e1 cd 93 34 a9 f1 4e 84 03 ec 81 70 90 13 7c 60 3d aa 44 34 ee bb 38 c1 a7 ce 3c c7 9d e5 07 b6 73 ed 06 5a c6 80 03 76 83 01 da e4 3e 1a 9c f9 8a 03 c0 40 74 19 06 e0 50 00 0f cc 2b 8e bf 30 ae 3a 7f 72 b2 ca 35 51 a3 ca b0 89 6c 51 02 1a cf bd 3d 5f 54 ba c8 5b 26 0d 1c 3f 90 c1 a4 b0 53 20 ea 21 31 ad 4e 10 c5 54 85 28 14 00 0b ac e8 71 2c 7c 1a 61 86 90 2a d6 f2 9c dc 99 31 12 23 74 99 f0 61 03 98 d5 a7 44 1b 4f 6c d8 f6 8d e8 5a ed 31 ea f2 9a c6 c5 2f e0 b8 43 1b 6c a4 4f 0d 26 4b 55 41 10 b1 c3 6f 78 ef 2b 46 b1 17 60 c2 fb ec e3 d7 45 73 63 38 32 4d d9 9b 7c 52 80 07 00 0d 4b cb 33 85 60 e1 f3 c9 cc cd 34 e9 43 12 28 72 4d cb c5 e3 d3 2c bb 6e 6a 62 8a b0 f9 b5 ba a7 2a 72 d9 Data Ascii: kJ&NCi[4Np\|`=D48<sZv>@tP+0:r5QlQ=_T[&?S !1NT(q,\|a1#taDOlZ1/ClO&KUAox+F`Esc82M\|RK3`4C(rM,njbr
2024-10-11 11:59:33 UTC	1369	IN	Data Raw: a1 54 05 12 29 4a 42 81 4b ab 1d 52 1a d4 46 64 92 82 a1 57 6b 8f be 7a 3f 9b 87 1d 4f 50 2a d6 01 3a ce 56 c1 90 c2 3e 24 1a e1 08 12 18 a6 73 09 50 af 57 8a 1f 4f d9 d3 64 5e b4 74 d5 61 c4 74 c0 0d 26 42 a4 99 13 2e 97 c5 54 f7 2b 2c ba 91 51 ad 61 d8 37 60 d3 69 78 76 73 71 ca b1 7a d7 16 d4 63 dd 20 e5 0d a4 63 a3 e5 59 aa d1 f4 86 12 af ae b1 94 68 cb 09 57 d0 54 a7 75 ef 33 8f 5d 15 cc 53 18 86 29 89 8f 72 43 69 a4 13 8d 92 01 01 00 e1 b1 83 53 f5 08 3b 1a 26 23 db 7e 2e 93 80 03 ba 62 21 c0 79 f0 ff 00 66 b3 e7 cb 76 d5 5f 49 29 0a df 90 a6 12 18 0c 5c 51 6a 3c ec 50 32 73 f6 f6 71 eb a2 b9 ca 63 10 c0 62 d4 f2 c4 ac 28 22 d6 4a 06 ef 5d b0 a6 41 69 c7 88 06 83 5c 03 42 52 98 04 07 27 e3 c4 c8 92 b3 91 3c d8 7f b3 59 f3 49 aa 2d a3 9f 38 09 07 27 Data Ascii: T)JBKRFdWkz?OP*:V>$sPWOd^tat&B.T+,Qa7`ixvsqzc cYhWTu3]S)rCiS;&#~.b!yfv_I)\Qj<P2sqcb("J]Ai\BR'<YI-8'
2024-10-11 11:59:33 UTC	1369	IN	Data Raw: 6a 2e 27 66 46 a9 48 cf 96 02 09 aa 45 41 2b 96 2d 86 96 68 e5 68 96 6e df c0 4a 26 ba 30 53 28 4e c2 b2 90 47 fb 5c e3 d7 45 79 1c 03 40 23 ff 00 1c 47 5c 03 ca 61 fc 34 be 87 90 04 43 f6 d4 1c 04 95 81 e2 4d 58 d3 29 6c 2a 8c 80 a4 e7 ce 5e b3 10 3a c2 3d cc e7 9f 3b fa 84 30 6b 08 f7 73 a3 0e b2 1f 79 ce eb 08 c4 20 9c 64 8c b0 ed 91 18 92 42 9b 32 99 a2 0e 29 ca c6 1c 13 3f 8d 24 8c 36 ee d9 9b d3 3e b1 ae a3 7d 39 86 d2 7e a0 f3 58 ef b3 60 b6 c9 9d e9 37 ac 21 10 9a 6d 24 65 8f b5 e1 82 72 35 39 94 14 8d 54 50 91 60 a9 50 37 89 b3 71 d6 6d 96 3b 58 48 e8 d4 f1 74 1a 73 56 a6 82 b0 07 e9 c3 7c ad 1a 48 eb 8b d0 26 11 7e 65 6b 6f 5b 1f fb 5c e3 d7 45 7b 56 1f c3 4b f3 53 31 83 cb 1a 48 be 77 09 5f 8b 80 68 46 ac 3c 8c ec c8 00 90 6f 43 12 bf f9 1b 9c Data Ascii: j.'fFHEA+-hhnJ&0S(NG\Ey@#G\a4CMX)l*^:=;0ksy dB2)?$6>}9~X`7!m$er59TP`P7qm;XHtsV\|H&~eko[\E{VKS1Hw_hF<oC
2024-10-11 11:59:33 UTC	1369	IN	Data Raw: 20 51 53 54 61 71 b1 b2 22 30 32 40 52 62 72 b3 14 42 55 60 81 91 92 a1 23 33 50 82 c1 73 a2 15 34 63 93 b0 d1 24 43 c2 d2 ff da 00 08 01 01 00 09 3f 00 ff 00 c2 64 40 15 22 c8 b7 20 15 37 1a be fd 9b 0a c6 45 1a 6f 25 85 63 4c ed bf 82 17 ac 90 cf ec bb c9 6a e0 f0 e9 ee ed ac a5 34 80 ee 2d 5a c9 79 2f 7f 88 fd f7 c5 c5 10 f7 d8 2f 7d 65 88 cb 0d c8 19 fc 22 b0 93 ca fb 89 00 2d 61 a2 c3 af 60 6a cb 38 95 0d b5 52 46 41 f9 0a c4 c9 23 72 b3 92 78 be db f8 8f df 26 0a 06 b2 49 b5 65 8c 3d f9 16 45 26 9a 4c 44 9d 40 ad 64 d8 a3 5d c6 4b b1 ac a4 51 79 11 40 ac 7c d2 76 b9 34 49 f3 3e db f8 8f de d2 00 ac a3 0c 5d a6 b1 4f 39 1b 78 20 08 35 92 3f bd e5 ff 00 00 54 b1 c2 37 18 c1 06 b2 8c b2 13 ca 69 c9 3e 7b db 7f 11 fb d8 51 4c a8 58 b3 00 d5 96 31 25 77 Data Ascii: QSTaq"02@RbrBU`#3Ps4c$C?d@" 7Eo%cLj4-Zy//}e"-a`j8RFA#rx&Ie=E&LD@d]KQy@\|v4I>]O9x 5?T7i>{QLX1%w
2024-10-11 11:59:33 UTC	1369	IN	Data Raw: a6 78 ca 03 f8 13 5a 6f 14 ce cd 14 1b 38 4f 79 ab 22 e1 cc 61 6c 45 8d 61 c4 10 69 16 08 36 02 c6 e6 a6 d1 66 4b e2 dc 6d 01 be a5 3f 05 86 8a c6 69 ad 7b 5f 70 ac 98 25 90 0b 19 a5 3a 4e d5 92 d6 27 2a 42 cb 19 d1 75 a2 5e 19 06 9c 12 da da 42 a5 2f 36 16 3e 12 12 4e b3 18 36 cd ce 62 bb 92 ba 14 9e 34 cf 28 8e 18 90 b3 12 68 58 4d 33 14 1c 89 b1 47 e5 4a 44 d8 c9 5a 72 0e e1 a9 47 75 10 15 41 24 9e 41 52 5b 01 0c 8c b0 20 3a 98 03 60 e6 a5 78 32 79 6d 41 47 97 2d b9 09 ac 8d 11 36 f4 de e4 9a c8 d1 03 b9 d2 ea 45 4a d3 64 e2 c2 f7 f4 a2 2d b8 9a 72 70 13 b0 13 a7 27 bc 28 dc 1d 86 be cd c5 fc a3 9b 9b 19 ba 5c de 33 5a a0 c1 43 a3 ee a0 de e6 b0 7f 4b 9c 0f 2a 69 8e fe a0 2b 24 c6 be 4d 83 26 a6 1d 62 a5 32 e1 31 1a 47 0e e7 6f 91 b4 1a 93 f8 18 98 99 Data Ascii: xZo8Oy"alEai6fKm?i{_p%:N'Bu^B/6>N6b4(hXM3GJDZrGuA$AR[ :`x2ymAG-6EJd-rp'(\3ZCKi+$M&b21Go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 11:59:33 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 11:59:33 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=103539 Date: Fri, 11 Oct 2024 11:59:33 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 11:59:34 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 11:59:34 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=103590 Date: Fri, 11 Oct 2024 11:59:34 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-11 11:59:34 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:25 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:25 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:25 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 09 Oct 2024 03:56:29 GMT ETag: "0x8DCE8165B436280" x-ms-request-id: 933bb64d-501e-00a3-36e1-1ac0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120025Z-17db6f7c8cfp6mfve0htepzbps00000001a0000000006z0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:25 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-11 12:00:25 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-11 12:00:25 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-11 12:00:25 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-11 12:00:25 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-11 12:00:25 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-11 12:00:25 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-11 12:00:25 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-11 12:00:25 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-11 12:00:25 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:26 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:26 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: a65062bf-401e-00ac-0ea3-1b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120026Z-17db6f7c8cfhrxld7punfw920n00000000r00000000010rx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:26 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:26 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:26 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 995dd301-801e-0035-24cd-1a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120026Z-17db6f7c8cf6qp7g7r97wxgbqc000000016g000000009qgb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:26 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:26 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:26 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:26 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9229949d-801e-008c-498a-1b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120026Z-17db6f7c8cf6qp7g7r97wxgbqc000000012g00000000gdpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:26 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:26 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:26 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:26 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: 96b96e33-b01e-003d-2de3-1ad32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120026Z-17db6f7c8cf5mtxmr1c51513n0000000024g000000003hpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:26 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:26 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:26 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:26 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ced16f83-c01e-008e-1322-1b7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120026Z-17db6f7c8cfspvtq2pgqb2w5k000000001tg000000006907 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:26 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:28 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120028Z-17db6f7c8cfbtxhfpq53x2ehdn00000001x0000000006fqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	13.107.246.45	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:28 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120028Z-17db6f7c8cfhrxld7punfw920n00000000qg000000002vzf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:28 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:28 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c77ee0be-a01e-0032-0c24-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120028Z-17db6f7c8cfnqpbkckdefmqa4400000001u000000000eh9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:28 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:28 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a417ae39-101e-008e-1f1c-1bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120028Z-17db6f7c8cffjrz2m4352snqkw000000029g000000004r1v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:28 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120028Z-17db6f7c8cfqxt4wrzg7st2fm800000001x000000000g9z7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:28 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120028Z-17db6f7c8cfhk56jxffpddwkzw00000001k000000000156g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:28 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 4a155f70-001e-0017-2dd7-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120028Z-17db6f7c8cfbd7pgux3k6qfa6000000000tg0000000078zn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:28 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120028Z-17db6f7c8cf6qp7g7r97wxgbqc000000012g00000000gdw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:28 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:28 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbc5b3b7-c01e-00a2-28e5-1a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120028Z-17db6f7c8cf5mtxmr1c51513n0000000022000000000ac34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:29 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:28 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: b3ad5e0b-501e-000a-1fe3-1a0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120028Z-17db6f7c8cfkzc2r8tan3gsa7n00000001x000000000eq3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:29 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e456ac6c-b01e-0097-6bbf-1a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120029Z-17db6f7c8cfbd7pgux3k6qfa6000000000ug000000004m4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:29 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:29 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120029Z-17db6f7c8cfhzb2znbk0zyvf6n00000001hg0000000098ch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:29 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:29 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120029Z-17db6f7c8cf4g2pjavqhm24vp4000000020000000000eh6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:29 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: b287654a-001e-0017-109b-1b0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120029Z-17db6f7c8cf96l6t7bwyfgbkhw00000000u000000000ep93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:29 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: f907bcfc-101e-007a-11f5-1a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120029Z-17db6f7c8cf4g2pjavqhm24vp4000000022000000000atmr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:29 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:30 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120030Z-17db6f7c8cf6qp7g7r97wxgbqc000000014g00000000ddak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:30 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:30 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120030Z-17db6f7c8cfq2j6f03aq9y8dns000000010g00000000c9qu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:32 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:32 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:32 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120032Z-17db6f7c8cf96l6t7bwyfgbkhw00000000wg000000009n5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 12:00:32 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:32 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:32 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:32 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: b009cb16-301e-0051-17aa-1b38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120032Z-17db6f7c8cfhrxld7punfw920n00000000h0000000009sw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 12:00:32 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:33 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fa6a24a8-e01e-0099-78e3-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120033Z-17db6f7c8cfkzc2r8tan3gsa7n00000002100000000068by x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:33 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:33 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7708100b-601e-003e-5be1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120033Z-17db6f7c8cfrkvzta66cx5wm6800000001dg000000005v6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:33 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: b368a101-001e-005a-6f1e-1bc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120034Z-17db6f7c8cfhzb2znbk0zyvf6n00000001hg0000000098s1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:34 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:35 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c832ddd9-b01e-0084-55ca-1ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120035Z-17db6f7c8cf5mtxmr1c51513n0000000024g000000003k94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:35 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:35 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b59689ad-601e-005c-3fe1-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120035Z-17db6f7c8cfthz27m290apz38g00000001g0000000008mtt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:35 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f7492d67-a01e-000d-0ae4-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120035Z-17db6f7c8cfthz27m290apz38g00000001bg00000000ga51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:35 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 94af937e-501e-0047-50ca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120035Z-17db6f7c8cfthz27m290apz38g00000001f000000000c00d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:36 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120036Z-17db6f7c8cf9t48t10xeshst8c00000001u0000000007nd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:36 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120036Z-17db6f7c8cftxb58mdzsfx75h400000001bg00000000dt7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:36 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:36 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120036Z-17db6f7c8cfp6mfve0htepzbps00000001c00000000021fh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:36 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:36 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:36 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f4abfb5c-001e-00a2-33e5-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120036Z-17db6f7c8cf5r84x48eqzcskcn00000001h000000000cbup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:36 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:36 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120036Z-17db6f7c8cfhzb2znbk0zyvf6n00000001m0000000005zg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:36 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:36 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120036Z-17db6f7c8cf5r84x48eqzcskcn00000001p000000000437b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:36 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:36 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120036Z-17db6f7c8cfqxt4wrzg7st2fm800000001w000000000hgda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:37 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:36 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:37 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 38f28e88-001e-0046-4a22-1bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120036Z-17db6f7c8cfhrxld7punfw920n00000000gg000000008zbb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 12:00:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:36 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:37 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120037Z-17db6f7c8cfrkvzta66cx5wm6800000001ag00000000brsc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:37 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:37 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 5aec4ebb-b01e-0002-57ca-1a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120037Z-17db6f7c8cffjrz2m4352snqkw000000024000000000efn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:37 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:38 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:38 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120038Z-17db6f7c8cf6qp7g7r97wxgbqc0000000190000000003btb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:38 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:38 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:38 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 725817be-301e-0052-7ede-1a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120038Z-17db6f7c8cfbr2wt66emzt78g400000001cg00000000bx33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:38 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:38 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:38 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120038Z-17db6f7c8cfhzb2znbk0zyvf6n00000001e000000000erd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:38 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:38 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:38 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 95529de3-401e-0064-4a25-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120038Z-17db6f7c8cfq2j6f03aq9y8dns00000000z000000000etpw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:38 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:38 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:38 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120038Z-17db6f7c8cfbtxhfpq53x2ehdn00000001z0000000000676 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:38 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:40 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 5d72a51a-801e-008f-7fe1-1a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120040Z-17db6f7c8cf4g2pjavqhm24vp40000000240000000006e8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:40 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120040Z-17db6f7c8cf4g2pjavqhm24vp40000000240000000006e8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:40 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:40 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120040Z-17db6f7c8cfqkqk8bn4ck6f72000000001p000000000894w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:40 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:40 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bf053e75-701e-000d-6f20-1b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120040Z-17db6f7c8cf5r84x48eqzcskcn00000001fg00000000g1sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:40 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120040Z-17db6f7c8cf9t48t10xeshst8c00000001ug000000006zpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:40 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:41 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 401112aa-201e-005d-70d7-1aafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120041Z-17db6f7c8cfthz27m290apz38g00000001hg0000000056gz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:41 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:41 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b9724e67-901e-00ac-7bd7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120041Z-17db6f7c8cfrkvzta66cx5wm6800000001ag00000000bs15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:41 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a2dd0523-901e-0064-1fe2-1ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120041Z-17db6f7c8cf9t48t10xeshst8c00000001tg0000000098xx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:41 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 150221b2-d01e-007a-13e9-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120041Z-17db6f7c8cfbtxhfpq53x2ehdn00000001xg000000004s19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:41 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120041Z-17db6f7c8cfhzb2znbk0zyvf6n00000001fg00000000ck8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:41 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:41 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120041Z-17db6f7c8cfq2j6f03aq9y8dns000000010000000000d60z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:42 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:41 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:42 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: b3584e95-501e-0029-5500-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120042Z-17db6f7c8cfqxt4wrzg7st2fm800000001y000000000eakq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:42 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:42 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:42 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6ee6cdcb-a01e-006f-4687-1b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120042Z-17db6f7c8cfbd7pgux3k6qfa6000000000vg0000000012d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:42 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:42 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:42 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 9a6afd11-d01e-0049-3e83-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120042Z-17db6f7c8cfq2j6f03aq9y8dns00000000yg00000000gdr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:42 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:42 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 640ec2fa-901e-0083-59e1-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120042Z-17db6f7c8cfvzwz27u5rnq9kpc000000025g00000000a4ym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:42 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:42 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120042Z-17db6f7c8cfp6mfve0htepzbps000000018g000000009p7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:42 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:42 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:42 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5dd409ef-301e-0099-0e1e-1b6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120042Z-17db6f7c8cfbtxhfpq53x2ehdn00000001yg000000001sav x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:42 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:42 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:42 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: fe1a2dd9-a01e-0053-57d8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120042Z-17db6f7c8cfbtxhfpq53x2ehdn00000001w0000000007u2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:42 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:42 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:42 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120042Z-17db6f7c8cfhk56jxffpddwkzw00000001fg000000007ms5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:42 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:42 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:42 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9542a535-401e-0064-601f-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120042Z-17db6f7c8cf5r84x48eqzcskcn00000001f000000000fzks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:43 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:43 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: beeeb270-f01e-003f-4fe2-1ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120043Z-17db6f7c8cfqxt4wrzg7st2fm800000001x000000000gbp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:43 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:43 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a0500a35-c01e-002b-5eef-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120043Z-17db6f7c8cf5mtxmr1c51513n0000000023g000000006k6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:43 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:43 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:43 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:43 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: b5702fc7-501e-0047-59e6-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120043Z-17db6f7c8cfhrxld7punfw920n00000000n00000000095cq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 12:00:43 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:43 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:43 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120043Z-17db6f7c8cffjrz2m4352snqkw000000025000000000dup2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:43 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:43 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:43 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4a3f7a17-001e-0017-5de5-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120043Z-17db6f7c8cfhrxld7punfw920n00000000r000000000126v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 12:00:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:44 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 7d3f2e15-101e-00a2-5aca-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120044Z-17db6f7c8cf6qp7g7r97wxgbqc000000014000000000dhgg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:44 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:44 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120044Z-17db6f7c8cf96l6t7bwyfgbkhw00000000t000000000g2c8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:44 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:44 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120044Z-17db6f7c8cf9t48t10xeshst8c00000001s000000000ccpx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:44 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 38d12744-701e-0050-7297-1b6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120044Z-17db6f7c8cf6qp7g7r97wxgbqc0000000180000000006b5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:44 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:44 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120044Z-17db6f7c8cf4g2pjavqhm24vp40000000230000000008v9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:44 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:45 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:45 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:45 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 94afa4f1-501e-0047-0aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120045Z-17db6f7c8cffjrz2m4352snqkw000000026g00000000b53q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:45 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:45 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:45 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: f4b6e6ad-001e-00a2-4de9-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120045Z-17db6f7c8cfhzb2znbk0zyvf6n00000001h000000000an5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:45 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:45 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:45 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120045Z-17db6f7c8cf96l6t7bwyfgbkhw00000000yg000000004hcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:45 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:45 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:45 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:45 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: e5b5a791-201e-0071-25a3-1bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120045Z-17db6f7c8cfp6mfve0htepzbps000000019g000000007t0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:45 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:45 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:45 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:45 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120045Z-17db6f7c8cfhzb2znbk0zyvf6n00000001n0000000003n3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:45 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:45 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:45 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 9a7d960e-501e-00a0-6dcd-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120045Z-17db6f7c8cfqxt4wrzg7st2fm800000001yg00000000cfg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:46 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:45 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:45 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 588a334f-a01e-0098-1acf-1a8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120045Z-17db6f7c8cfp6mfve0htepzbps00000001a00000000070cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:45 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:46 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: a671d058-901e-00a0-5ad6-1a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120046Z-17db6f7c8cfqkqk8bn4ck6f72000000001r0000000002utr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:46 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120046Z-17db6f7c8cfspvtq2pgqb2w5k000000001sg0000000086qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:46 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:46 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c154ba59-a01e-0070-01d7-1a573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120046Z-17db6f7c8cfq2j6f03aq9y8dns000000011000000000axdx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:46 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:46 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:46 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120046Z-17db6f7c8cfspvtq2pgqb2w5k000000001v000000000142n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:46 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:46 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:46 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120046Z-17db6f7c8cfvzwz27u5rnq9kpc0000000270000000006wk9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:46 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:46 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:46 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 7d81a33d-101e-00a2-42e1-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120046Z-17db6f7c8cf5r84x48eqzcskcn00000001eg00000000gzx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:46 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:46 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:46 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120046Z-17db6f7c8cf5r84x48eqzcskcn00000001h000000000ccrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:46 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:47 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e6504dd7-401e-0015-6cce-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120047Z-17db6f7c8cfhzb2znbk0zyvf6n00000001dg00000000gy79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:47 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:47 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: efbad5a3-301e-0000-2ec0-1aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120047Z-17db6f7c8cfthz27m290apz38g00000001cg00000000fwfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:47 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:47 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:47 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f659b87d-a01e-0002-04d9-1a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120047Z-17db6f7c8cftxb58mdzsfx75h400000001b000000000eu5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:47 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:47 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:47 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: de2b4a30-201e-0071-54e2-1aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120047Z-17db6f7c8cfbtxhfpq53x2ehdn00000001xg000000004seb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:47 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:47 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:47 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:47 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 36ec684a-f01e-0052-24da-1a9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120047Z-17db6f7c8cftxb58mdzsfx75h400000001a000000000g1k6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:47 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:48 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:48 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 8d6d9129-701e-0001-43c0-1ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120048Z-17db6f7c8cfnqpbkckdefmqa4400000001v000000000c22v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:48 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:48 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:48 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e8fbd797-601e-005c-7ee6-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120048Z-17db6f7c8cfvzwz27u5rnq9kpc000000024000000000dnh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:48 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:48 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:48 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120048Z-17db6f7c8cfhk56jxffpddwkzw00000001eg0000000099n5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:48 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:48 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:48 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 44f36d90-201e-00aa-7dd7-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120048Z-17db6f7c8cfp6mfve0htepzbps00000001ag000000006ma6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:48 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:48 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:48 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 73142df5-301e-0052-1d1f-1b65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120048Z-17db6f7c8cfp6mfve0htepzbps000000017g00000000ckd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:49 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 35289574-d01e-00ad-2923-1be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120049Z-17db6f7c8cfnqpbkckdefmqa4400000001z0000000002wpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:49 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 44110a29-201e-00aa-4c81-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120049Z-17db6f7c8cfqxt4wrzg7st2fm800000001y000000000eb3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:49 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:49 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120049Z-17db6f7c8cfp6mfve0htepzbps000000018g000000009ppm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:49 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:49 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:49 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a9c9f622-801e-0047-0d7e-1b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120049Z-17db6f7c8cfp6mfve0htepzbps00000001ag000000006mbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:49 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:49 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:49 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:49 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: f4958516-001e-00a2-15de-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120049Z-17db6f7c8cfq2j6f03aq9y8dns0000000120000000009rt6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:49 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:49 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:49 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2d3659d2-d01e-0066-1cca-1aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120049Z-17db6f7c8cfqkqk8bn4ck6f72000000001mg00000000bg1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:50 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:49 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:49 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120049Z-17db6f7c8cfqxt4wrzg7st2fm800000001wg00000000gmbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:50 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:50 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 05046913-601e-000d-6fd8-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120050Z-17db6f7c8cf5mtxmr1c51513n0000000021g00000000b3qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:50 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:50 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:50 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a032a6e1-c01e-002b-15e5-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120050Z-17db6f7c8cffjrz2m4352snqkw000000029g000000004se2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:50 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:50 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 03f8bcf3-701e-0098-27e6-1a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120050Z-17db6f7c8cfbr2wt66emzt78g400000001a000000000fy7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:50 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:50 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:50 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: ecaa5255-c01e-008d-52bf-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120050Z-17db6f7c8cf4g2pjavqhm24vp4000000022g000000009nt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:50 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:50 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 7ee78019-a01e-0002-6d9c-1b5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120050Z-17db6f7c8cfq2j6f03aq9y8dns000000014g000000003ubc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:50 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:50 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:50 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:50 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1c06004d-d01e-005a-0ee5-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120050Z-17db6f7c8cfspvtq2pgqb2w5k000000001qg00000000cghq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:50 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:50 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 12:00:51 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 12:00:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 6411c5a0-901e-0083-0ae3-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T120050Z-17db6f7c8cf5r84x48eqzcskcn00000001gg00000000d8ry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 12:00:51 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 12:00:51 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1892, Parent PID: 3332

General

Target ID:	0
Start time:	07:59:23
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2008, Parent PID: 1892

General

Target ID:	2
Start time:	07:59:25
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2536,i,7863971053735467859,4641576264320709256,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6340, Parent PID: 3332

General

Target ID:	3
Start time:	07:59:28
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly