Edit tour

Windows Analysis Report
https://fonts.googleapis.com/css?family=Open+Sans

Overview

General Information

Sample URL:	https://fonts.googleapis.com/css?family=Open+Sans
Analysis ID:	1539383
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2260,i,9008067112591937361,9183123673498224839,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://fonts.googleapis.com/css?family=Open+Sans" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://fonts.googleapis.com/css?family=Open+Sans

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=OrsvNr1cfpohnxf&MD=eN2WMcO4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=OrsvNr1cfpohnxf&MD=eN2WMcO4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic

DNS traffic detected: DNS query: www.google.com

Source: chromecache_39.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_39.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_39.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_39.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_39.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_39.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_39.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_39.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_39.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_39.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/2@2/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2260,i,9008067112591937361,9183123673498224839,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://fonts.googleapis.com/css?family=Open+Sans"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2260,i,9008067112591937361,9183123673498224839,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
s-part-0039.t-0009.fb-t-msedge.net	13.107.253.67	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.186.36	www.google.com	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1539383
Start date and time:	2024-10-22 16:03:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://fonts.googleapis.com/css?family=Open+Sans
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/2@2/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.110, 64.233.166.84, 172.217.18.99, 34.104.35.123, 142.250.186.138, 216.58.206.35, 93.184.221.240, 13.95.31.18, 192.229.221.95, 52.165.164.15, 142.250.186.67
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://fonts.googleapis.com/css?family=Open+Sans

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://fonts.googleapis.com/css?family=Open+Sans Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "VIEW SHARED FILE", "prominent_button_name": "VIEW SHARED FILE", "text_input_field_labels": [ "Email Address", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://fonts.googleapis.com/css?family=Open+Sans Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 39

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	5973
Entropy (8bit):	5.385847419693263
Encrypted:	false
SSDEEP:	96:ZOEMJJOEMiDFZ8OEMXkOEMhYOEMlOEM5y+aZjzBrWOEMfubqGIFuV4UOEMmOEMZ0:wJAiXBh1s5qb2bqGIwV4R3ZqF
MD5:	207F621B4209616283D091A5A0F8CD49
SHA1:	D34E96207B74C7446771ED458DDB74AE78121E93
SHA-256:	5780DCB011235F74EBD060A2E1D7E214E3BD12E13982BF4BD7FBE052D3D55F63
SHA-512:	91EA88B5F95863ABBB93E69AF3D7F68BD0D5C3716C5294869A64D5C08C573DA8FE1695279B397D7E7765431863013AC7AFB6DA00559C49AA49E6D4E87580C306
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open+Sans
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVIGxA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVIGxA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-fa

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 22, 2024 16:04:33.151485920 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 22, 2024 16:04:42.755717039 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 22, 2024 16:04:46.926744938 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:04:46.926805019 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 22, 2024 16:04:46.926897049 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:04:46.927077055 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:04:46.927093029 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 22, 2024 16:04:47.801263094 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 22, 2024 16:04:47.801630020 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:04:47.801651955 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 22, 2024 16:04:47.802644014 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 22, 2024 16:04:47.802717924 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:04:47.803761959 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:04:47.803828001 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 22, 2024 16:04:47.853328943 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:04:47.853363991 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 22, 2024 16:04:47.900258064 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:04:48.125895977 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:48.125931025 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:48.126116037 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:48.135056973 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:48.135087967 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:49.001395941 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:49.001585007 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:49.005729914 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:49.005747080 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:49.006047010 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:49.058360100 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:49.068222046 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:49.111341953 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:49.314857960 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:49.314934015 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:49.314996958 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:49.320955038 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:49.320981026 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:49.320998907 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:49.321007013 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:49.389189005 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:49.389240026 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:49.389329910 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:49.389650106 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:49.389662981 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:50.245843887 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:50.247390032 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:50.247390032 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:50.247407913 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:50.247636080 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:50.249460936 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:50.295344114 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:50.512109995 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:50.512191057 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:50.513056040 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:50.513056040 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:50.513936043 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 22, 2024 16:04:50.513952017 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 22, 2024 16:04:55.521588087 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:55.521626949 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:55.521706104 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:55.522941113 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:55.522954941 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:56.419815063 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:56.419944048 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:56.424098969 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:56.424109936 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:56.424365997 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:56.477853060 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:57.558873892 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:57.599333048 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:57.803895950 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 22, 2024 16:04:57.803958893 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 22, 2024 16:04:57.804080009 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:04:57.853935003 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:57.853960991 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:57.853967905 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:57.854026079 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:57.854046106 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:57.854046106 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:57.854065895 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:57.854087114 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:57.854115963 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:57.854159117 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:57.864244938 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:57.864320040 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:57.864322901 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:57.864392996 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:58.880362988 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:58.880393028 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:58.880430937 CEST	49744	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:04:58.880439043 CEST	443	49744	52.149.20.212	192.168.2.4
Oct 22, 2024 16:04:59.760924101 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:04:59.760953903 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 22, 2024 16:05:00.904606104 CEST	49723	80	192.168.2.4	2.19.126.163
Oct 22, 2024 16:05:00.910582066 CEST	80	49723	2.19.126.163	192.168.2.4
Oct 22, 2024 16:05:00.910644054 CEST	49723	80	192.168.2.4	2.19.126.163
Oct 22, 2024 16:05:35.157543898 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:35.157599926 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:35.157706022 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:35.158118963 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:35.158132076 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:35.640053034 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:35.640108109 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:35.640300989 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:35.640578985 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:35.640589952 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.050585985 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.050663948 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:36.057936907 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:36.057960033 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.058480978 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.074506044 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:36.115344048 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.366435051 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.366460085 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.366570950 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.366586924 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:36.366612911 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.366671085 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:36.366671085 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:36.370031118 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.370078087 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.370086908 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:36.370121956 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.370165110 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:36.370165110 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:36.380002022 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 22, 2024 16:05:36.380019903 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 22, 2024 16:05:36.418684006 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.418768883 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.424077988 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.424089909 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.424312115 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.437186003 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.483345985 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.664896965 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.664927959 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.664943933 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.665009022 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.665024042 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.665075064 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.693428040 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.693455935 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.693516016 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.693531990 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.693569899 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.926899910 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.926927090 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.926974058 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.926994085 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.927050114 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.930823088 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.930845022 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.930913925 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.930923939 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.930965900 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.934175968 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.934194088 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.934261084 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.934293032 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.934333086 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.940757990 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.940795898 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.940860987 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:36.940875053 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:36.940917969 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.021162033 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.021190882 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.021245956 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.021260023 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.021296978 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.021312952 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.023675919 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.023706913 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.023780107 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.023792028 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.023833036 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.026818991 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.026853085 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.026889086 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.026899099 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.026942015 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.048321962 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.048347950 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.048419952 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.048432112 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.048496008 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.139586926 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.139624119 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.139674902 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.139697075 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.139727116 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.139745951 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.164916039 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.164942026 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.165055037 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.165061951 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.165111065 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.167820930 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.167836905 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.167910099 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.167915106 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.167954922 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.169070005 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.169132948 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.169137001 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.169162989 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.169173002 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.169203043 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.183075905 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.183101892 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.183140993 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.183147907 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.575997114 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.576041937 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.577940941 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.577980995 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.578001022 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.578274012 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.578944921 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.578959942 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.579464912 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.579758883 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.579776049 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.579936028 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.579955101 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.580949068 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.580960989 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.581053019 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.581202030 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.581212044 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.581696987 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.581708908 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.583338022 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.583379030 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:37.583724022 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.583724022 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:37.583776951 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.327862978 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.328458071 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.328476906 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.328974962 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.328980923 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.336047888 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.337071896 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.337071896 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.337089062 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.337106943 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.337452888 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.337718010 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.337732077 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.338092089 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.338098049 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.340548992 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.340950012 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.340969086 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.341396093 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.341399908 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.639842987 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.639864922 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.639916897 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.639921904 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.639971972 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.640677929 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.640698910 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.640710115 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.640714884 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.640898943 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.643330097 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.643362999 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.644511938 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.644520998 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.648291111 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.648334980 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:38.648399115 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.648550987 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:38.648576021 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.695633888 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.695663929 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.695673943 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.695722103 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.695761919 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.695846081 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.695846081 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.696422100 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.696455002 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.696464062 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.696479082 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.696485043 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.696515083 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.696540117 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.696587086 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.696599007 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.696690083 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.698813915 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.698832035 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.700339079 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.700346947 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.701059103 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.701075077 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.701224089 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.701230049 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.706048965 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.706084967 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.706401110 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.706401110 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.706429958 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.709456921 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.709470034 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.709594965 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.709804058 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.709814072 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.710634947 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.710669994 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.712366104 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.712686062 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.712697029 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.833621025 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.833697081 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.833780050 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.834126949 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.834126949 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.834145069 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.834152937 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.838042021 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.838072062 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:39.838206053 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.838430882 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:39.838445902 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.450618029 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.451349020 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.451379061 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.451875925 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.451879978 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.453568935 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.453913927 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.453933001 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.454543114 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.454547882 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.465801954 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.466445923 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.466473103 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.466934919 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.466941118 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.470609903 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.471079111 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.471105099 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.471568108 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.471574068 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.585803986 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.585968018 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.586028099 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.586240053 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.586255074 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.586268902 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.586273909 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.588929892 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.589010000 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.589056015 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.589665890 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.589692116 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.589704037 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.589709997 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.594321012 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.594374895 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.594434023 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.595091105 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.597322941 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.597353935 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.597424030 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.597781897 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.597819090 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.598419905 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.598427057 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.599179983 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.599184036 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.599502087 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.599512100 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.601824045 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.601886988 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.601933002 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.602335930 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.602344036 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.602363110 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.602366924 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.607424974 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.607467890 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.607544899 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.607762098 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.607777119 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.608947039 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.609693050 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.609760046 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.613564968 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.613594055 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.613609076 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.613615990 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.616724968 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.616765976 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.616835117 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.617036104 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.617053986 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.733931065 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.734008074 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.734066010 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.734369040 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.734390974 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.734401941 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.734410048 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.737922907 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.737972975 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:40.738046885 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.738245010 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:40.738255978 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.345029116 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.345616102 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.345649004 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.346128941 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.346133947 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.351650953 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.352044106 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.352060080 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.352458954 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.352464914 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.361268997 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.361609936 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.361629009 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.361987114 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.361993074 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.373163939 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.373500109 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.373521090 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.373897076 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.373904943 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.480379105 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.480528116 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.480685949 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.480779886 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.480803013 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.480813980 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.480820894 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.484210014 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.484256029 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.484381914 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.484581947 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.484601974 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.486977100 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.487828970 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.487889051 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.487920046 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.487935066 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.487945080 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.487950087 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.490364075 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.490406990 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.490521908 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.490695953 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.490710020 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.501143932 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.501626015 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.501643896 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.502099991 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.502106905 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.505341053 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.505482912 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.505543947 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.505628109 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.505642891 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.505654097 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.505660057 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.508450985 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.508502007 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.508567095 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.508735895 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.508750916 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.510618925 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.510780096 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.510844946 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.510880947 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.510880947 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.510895014 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.510906935 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.513233900 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.513276100 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.513349056 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.513489962 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.513504982 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.640852928 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.640929937 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.641004086 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.645634890 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.645656109 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.645667076 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.645673037 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.649235964 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.649276972 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:41.649372101 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.649564981 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:41.649578094 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.516396999 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.517071962 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.517090082 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.517702103 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.517708063 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.524832964 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.525371075 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.525527000 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.525551081 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.525902033 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.525911093 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.526181936 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.526187897 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.526278019 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.526289940 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.528395891 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.528743982 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.528759003 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.529115915 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.529122114 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.531342030 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.531764030 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.531786919 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.532033920 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.532042980 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.651731968 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.651890993 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.651959896 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.652123928 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.652142048 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.652164936 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.652178049 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.655559063 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.655601025 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.655966997 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.656238079 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.656253099 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.659359932 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.659710884 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.659864902 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.659887075 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.659903049 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.659919024 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.659925938 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.662312031 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.662391901 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.662724972 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.662843943 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.662863970 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.662875891 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.662882090 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.665719032 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.665766001 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.666019917 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.666182041 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.666198015 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.668961048 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.668996096 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.669068098 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.669450045 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.669465065 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.669491053 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.669564009 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.669610023 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.669861078 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.669881105 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.669892073 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.669898033 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.672893047 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.672966957 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.673245907 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.678201914 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.678252935 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.678267956 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.678276062 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.679410934 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.679450035 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.679744959 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.679896116 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.679913998 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.681056023 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.681098938 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:42.681173086 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.681287050 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:42.681303024 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.956625938 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.957429886 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:43.957458973 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.958515882 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:43.958529949 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.964386940 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.964864969 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.965254068 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:43.965276957 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.965421915 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.965640068 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.966540098 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:43.966557026 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.967288017 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:43.967310905 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.967729092 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:43.967741013 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.968575954 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:43.968592882 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.969224930 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:43.969240904 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.969665051 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:43.969691992 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:43.970251083 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:43.970257044 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.091335058 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.091408014 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.091926098 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.092220068 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.092242956 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.092256069 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.092262030 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.096963882 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.097002983 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.097088099 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.097361088 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.097373962 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.100122929 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.100337029 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.100541115 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.100893974 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.100919008 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.100966930 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.100972891 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.101253986 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.101315022 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.101409912 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.102701902 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.102929115 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.102950096 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.102963924 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.102968931 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.103054047 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.103112936 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.105037928 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.105042934 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.108861923 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.108890057 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.108946085 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.109540939 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.109551907 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.110788107 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.110824108 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.110913992 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.112680912 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.112714052 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.112785101 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.113056898 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.113080025 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.113138914 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.113156080 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.487327099 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.487401009 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.487454891 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.487773895 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.487773895 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.487792015 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.487796068 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.490467072 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.490515947 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.490593910 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.490783930 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:44.490797997 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.982908010 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.983134985 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.984134912 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:44.984157085 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.015103102 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.015120029 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.016053915 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.016071081 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.016364098 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.016391039 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.017137051 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.017146111 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.017604113 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.017627001 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.018378973 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.018383026 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.018989086 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.019004107 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.019952059 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.019958973 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.149470091 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.149548054 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.149722099 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.150208950 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.150213957 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.150248051 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.150362968 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.150476933 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.150537968 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.150690079 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.150734901 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.152031898 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.152180910 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.152292013 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.152525902 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.152544975 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.154126883 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.154160023 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.154179096 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.154186010 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.156193972 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.156205893 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.197484016 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.197542906 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.197633028 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.200205088 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.200227976 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.203907967 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.203947067 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.204322100 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.205051899 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.205060959 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.206262112 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.206298113 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.206370115 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.207874060 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.207894087 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.208436012 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.208444118 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.210306883 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.210818052 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.210825920 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.583992004 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.584666014 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.584691048 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.585764885 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.585778952 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.719629049 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.719779015 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.720067024 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.720156908 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.720176935 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.720186949 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.720192909 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.724889994 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.724936008 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.725240946 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.725616932 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.725627899 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.946341991 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.947078943 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.947105885 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.948616982 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.948621988 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.963207006 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.963840961 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.963855028 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.964759111 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.964765072 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.967534065 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.967899084 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.968437910 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.968457937 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.969136953 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.969146013 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.969763994 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.969772100 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:45.970596075 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:45.970599890 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.078874111 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.079245090 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.079297066 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.079391956 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.079391956 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.079413891 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.079425097 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.083699942 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.083743095 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.083839893 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.084279060 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.084297895 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.101300955 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.101408958 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.101480961 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.101747036 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.101764917 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.101773024 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.101779938 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.105247021 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.105302095 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.105384111 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.105684042 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.105696917 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.106806040 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.107183933 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.107345104 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.107346058 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.108438969 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.108455896 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.109838009 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.110021114 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.110094070 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.110094070 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.110246897 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.110259056 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.112899065 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.112937927 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.113059998 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.113878012 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.113889933 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.114511013 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.114557028 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.114618063 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.114902020 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.114914894 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.476814985 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.477343082 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.477370024 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.477797031 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.477802038 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.612948895 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.613017082 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.613069057 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.613802910 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.613825083 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.613847971 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.613854885 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.622546911 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.622586966 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.622646093 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.623327971 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.623347998 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.835846901 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.837692976 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.837724924 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.840212107 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.840221882 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.843523979 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.844885111 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.844917059 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.846741915 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.846749067 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.871649981 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.872684956 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.872713089 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.874001980 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.874012947 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.878115892 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.879237890 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.879282951 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.881160021 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.881184101 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.969646931 CEST	49793	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:05:46.969679117 CEST	443	49793	142.250.186.36	192.168.2.4
Oct 22, 2024 16:05:46.969744921 CEST	49793	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:05:46.970331907 CEST	49793	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:05:46.970345974 CEST	443	49793	142.250.186.36	192.168.2.4
Oct 22, 2024 16:05:46.972506046 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.972765923 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.972825050 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.981575012 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.981592894 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.981606007 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.981617928 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.982347965 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.982423067 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.982462883 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.985305071 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.985331059 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.985342979 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.985348940 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.991276026 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.991322994 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.991385937 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.992217064 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.992230892 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.993537903 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.993572950 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:46.993630886 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.994003057 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:46.994019032 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.009557009 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.010327101 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.010377884 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.010521889 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.010535002 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.017112017 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.017173052 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.017222881 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.026336908 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.026374102 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.026386023 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.026393890 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.030227900 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.030258894 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.030318022 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.031410933 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.031419039 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.033584118 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.033631086 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.033699036 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.034058094 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.034085035 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.418960094 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.422784090 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.422797918 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.424096107 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.424101114 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.558026075 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.558228016 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.558382988 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.558746099 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.558746099 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.558764935 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.558775902 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.563333035 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.563369036 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.563553095 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.564412117 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.564429045 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.741466999 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.742129087 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.742141008 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.742635965 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.742640972 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.758943081 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.759463072 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.759525061 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.759919882 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.759938955 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.790138006 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.790684938 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.791143894 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.791151047 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.791162014 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.791174889 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.791333914 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.791338921 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.791775942 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.791784048 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.792722940 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 22, 2024 16:05:47.799206972 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 22, 2024 16:05:47.799381971 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 22, 2024 16:05:47.821130037 CEST	443	49793	142.250.186.36	192.168.2.4
Oct 22, 2024 16:05:47.821655035 CEST	49793	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:05:47.821682930 CEST	443	49793	142.250.186.36	192.168.2.4
Oct 22, 2024 16:05:47.822063923 CEST	443	49793	142.250.186.36	192.168.2.4
Oct 22, 2024 16:05:47.822618961 CEST	49793	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:05:47.822699070 CEST	443	49793	142.250.186.36	192.168.2.4
Oct 22, 2024 16:05:47.870316982 CEST	49793	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:05:47.877278090 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.877350092 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.877443075 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.877717018 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.877717018 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.877743006 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.877753019 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.880640030 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.880675077 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.880738020 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.880898952 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.880911112 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.898264885 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.898336887 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.898411989 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.898708105 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.898708105 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.898725986 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.898740053 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.902072906 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.902108908 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.902178049 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.902441978 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.902456045 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.930890083 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.931032896 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.931134939 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.931291103 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.931319952 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.931334972 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.931341887 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.934526920 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.934559107 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.934628010 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.934828043 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.934838057 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.935403109 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.935841084 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.935931921 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.935991049 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.936009884 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.936043978 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.936049938 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.938824892 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.938868999 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:47.939109087 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.939300060 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:47.939311028 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.331820011 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.332418919 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.332438946 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.332932949 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.332943916 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.470864058 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.471049070 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.471117973 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.471266985 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.471278906 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.471292973 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.471298933 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.474183083 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.474230051 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.474386930 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.474581957 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.474591970 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.649316072 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.649880886 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.649921894 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.650393009 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.650403023 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.666369915 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.666893005 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.666924953 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.667491913 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.667504072 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.689268112 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.689831018 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.689855099 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.690326929 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.690331936 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.691535950 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.691881895 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.691906929 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.692398071 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.692404985 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.789028883 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.789150000 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.789216042 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.789449930 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.789472103 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.789485931 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.789493084 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.792839050 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.792896032 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.792974949 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.793135881 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.793153048 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.803356886 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.803498983 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.803571939 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.803852081 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.803852081 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.803870916 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.803880930 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.807178974 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.807226896 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.807332039 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.807580948 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.807595015 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.825380087 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.825557947 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.825731993 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.825937033 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.825937033 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.825963974 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.825969934 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.827995062 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.828294992 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.828351021 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.828643084 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.828659058 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.828675032 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.828681946 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.829088926 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.829113960 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.829188108 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.829344988 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.829355001 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.831353903 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.831389904 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:48.831593037 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.831964970 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:48.831976891 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.299956083 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.300489902 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.300498009 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.300964117 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.300968885 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.439169884 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.439235926 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.439471960 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.439506054 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.439519882 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.439533949 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.439539909 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.442271948 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.442298889 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.442365885 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.442512035 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.442523956 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.762128115 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.762216091 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.762402058 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.762975931 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.762993097 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.763246059 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.763271093 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.763520002 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.763525009 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.763775110 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.763789892 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.763801098 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.764161110 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.764161110 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.764168024 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.764189959 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.764384985 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.764393091 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.764878988 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.764883995 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.897171974 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.897270918 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.897316933 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.897543907 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.897568941 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.897574902 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.897581100 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.897691011 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.898016930 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.898065090 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.898323059 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.898341894 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.898350954 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.898358107 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.898864985 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.898983955 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.899029970 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.899557114 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.899560928 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.899571896 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.899574995 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.899804115 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.900155067 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.900219917 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.900837898 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.900851965 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.900902987 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.900908947 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.902826071 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.902863979 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.902884007 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.902932882 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.902970076 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.903333902 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.903826952 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.903841019 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.903857946 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.903871059 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.904588938 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.904603004 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.905039072 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.905169010 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.905178070 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.905324936 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.905343056 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:49.905412912 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.905513048 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:49.905522108 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.188083887 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.188641071 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.188654900 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.189215899 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.189222097 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.323148966 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.323235035 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.323518991 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.324645996 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.324664116 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.324677944 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.324683905 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.327653885 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.327709913 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.327795029 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.327946901 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.327965021 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.669296026 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.669873953 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.669903994 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.670315027 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.670322895 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.673641920 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.674119949 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.674144983 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.674637079 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.674643040 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.679831028 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.680229902 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.680252075 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.680630922 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.680636883 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.681884050 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.682228088 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.682245016 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.682590961 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.682595968 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.804696083 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.804785013 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.804846048 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.805008888 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.805033922 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.805059910 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.805066109 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.807952881 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.807996035 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.808051109 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.808206081 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.808219910 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.811290026 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.811361074 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.811435938 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.811579943 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.811580896 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.811589956 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.811593056 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.814299107 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.814352989 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.814430952 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.814563990 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.814574003 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.818306923 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.818510056 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.818584919 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.818625927 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.818638086 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.818649054 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.818653107 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.821054935 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.821147919 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.821218014 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.821393013 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.821436882 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.823833942 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.824464083 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.824526072 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.824568033 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.824582100 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.824594021 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.824604034 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.826977968 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.827014923 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:50.827079058 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.827269077 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:50.827281952 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.079257011 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.079775095 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.079796076 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.080245972 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.080250978 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.215564966 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.215635061 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.215801954 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.215867043 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.215889931 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.215902090 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.215909958 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.218734026 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.218776941 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.218844891 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.218991995 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.219005108 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.554450035 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.555077076 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.555100918 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.556149006 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.556160927 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.578063011 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.580583096 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.583055019 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.595086098 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.595104933 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.595851898 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.595855951 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.596193075 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.596213102 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.597007990 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.597013950 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.597675085 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.597683907 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.598511934 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.598516941 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.689937115 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.690012932 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.690188885 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.690865040 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.690897942 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.690911055 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.690917015 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.696408987 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.696450949 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.696712017 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.697309017 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.697325945 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.729011059 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.729095936 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.729161024 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.729280949 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.729598999 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.729686022 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.730089903 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.730089903 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.730109930 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.730118990 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.732166052 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.732187033 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.732193947 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.732199907 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.732532978 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.732717037 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.732780933 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.734026909 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.734040022 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.737029076 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.737097025 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.737160921 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.737574100 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.737586975 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.739883900 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.739918947 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.739972115 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.740228891 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.740243912 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.741662979 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.741699934 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.741848946 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.742017984 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.742036104 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.972718000 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.975141048 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.975172043 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:51.976049900 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:51.976054907 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.110802889 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.111633062 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.112029076 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.112145901 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.112158060 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.116044998 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.116081953 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.116203070 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.116456032 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.116470098 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.471571922 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.472598076 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.472599030 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.472631931 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.472644091 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.490503073 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.491043091 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.491066933 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.491604090 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.491609097 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.492351055 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.494153023 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.494179964 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.494611025 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.494616985 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.499401093 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.499820948 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.499829054 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.500260115 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.500264883 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.606123924 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.606328011 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.606442928 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.606599092 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.606618881 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.606631994 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.606637955 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.610199928 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.610240936 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.610435009 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.610610008 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.610621929 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.628151894 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.628242016 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.628524065 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.628741980 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.628755093 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.628767967 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.628773928 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.629080057 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.629560947 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.629631042 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.629698992 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.629719019 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.629733086 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.629739046 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.633857012 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.633891106 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.634026051 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.634479046 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.634493113 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.636792898 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.636830091 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.636887074 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.637053967 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.637068987 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.643646002 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.643731117 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.643805981 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.645116091 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.645136118 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.645153046 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.645159960 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.648142099 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.648186922 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.648258924 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.648488045 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.648499012 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.878812075 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.879422903 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.879435062 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:52.879930973 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:52.879935980 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.015916109 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.016030073 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.016076088 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.016391993 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.016418934 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.022028923 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.022069931 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.023272991 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.023595095 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.023612022 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.372494936 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.373121023 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.373136997 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.373889923 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.373895884 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.384207010 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.385200024 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.385226965 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.386097908 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.386116028 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.425193071 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.425728083 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.425755024 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.426630020 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.426656961 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.428267956 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.428729057 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.428749084 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.429429054 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.429440022 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.513103962 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.513695955 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.513756990 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.514007092 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.514028072 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.514039993 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.514048100 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.517647028 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.517690897 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.517844915 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.518019915 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.518034935 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.520695925 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.521298885 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.521358013 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.521442890 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.521461010 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.521472931 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.521478891 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.526027918 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.526058912 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.526166916 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.527018070 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.527031898 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.561706066 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.561780930 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.561834097 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.564239979 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.564265966 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.564327955 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.564337969 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.569235086 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.569329023 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.569401026 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.574978113 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.575011015 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.575036049 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.575042963 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.610608101 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.610646009 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.610708952 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.641598940 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.641644001 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.641733885 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.642055035 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.642079115 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.649172068 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.649183989 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.796413898 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.797511101 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.797529936 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.797966957 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.797975063 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.935272932 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.935343981 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.935410023 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.935691118 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.935714006 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.935719967 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.935726881 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.938532114 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.938571930 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:53.938695908 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.938935995 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:53.938952923 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.293684959 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.294286013 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.294301033 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.294898987 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.294910908 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.296081066 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.296828032 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.296891928 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.297713041 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.297720909 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.419500113 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.420206070 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.420233965 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.421854019 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.421868086 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.424745083 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.425820112 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.425847054 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.426609039 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.426618099 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.433542013 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.433617115 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.433686018 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.434062004 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.434078932 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.435935020 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.435960054 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.436028004 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.436032057 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.436072111 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.436604023 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.436624050 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.441173077 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.441207886 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.441556931 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.441998005 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.442013025 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.443240881 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.443274975 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.443396091 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.443578005 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.443598032 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.557387114 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.557419062 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.557476997 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.557480097 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.557559013 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.557890892 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.557915926 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.557930946 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.557936907 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.561319113 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.561382055 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.561984062 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.562026978 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.562031984 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.562211990 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.562638998 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.562639952 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.562655926 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.562665939 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.564737082 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.564764023 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.567538023 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.567574978 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.567653894 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.568229914 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.568248034 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.678597927 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.679255009 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.679270983 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.680005074 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.680015087 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.819192886 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.819219112 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.819308043 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.819328070 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.819375038 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.819437027 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.819487095 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.819561958 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.819653988 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.819669008 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.819674969 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.819679976 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.823506117 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.823554039 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:54.823651075 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.824069023 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:54.824080944 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.359788895 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.360502005 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.360528946 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.360979080 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.360984087 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.361807108 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.362023115 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.362380981 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.362401962 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.362416983 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.362417936 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.362978935 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.362984896 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.363193989 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.363204956 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.363729000 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.364128113 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.364151001 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.364541054 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.364546061 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.750371933 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.750392914 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.750456095 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.750462055 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.750526905 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.750685930 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.750863075 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.750926018 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.751036882 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.751195908 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.751245975 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.751262903 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.751337051 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.751391888 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.757324934 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.757344007 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.757626057 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.757638931 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.765033960 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.765048981 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.765085936 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.765091896 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.771003008 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.771012068 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.783202887 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.783237934 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.783344030 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.784113884 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.784152031 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.784235954 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.784773111 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.784790993 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.784841061 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.785157919 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.785175085 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.785264015 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.785280943 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.785495043 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.785507917 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.786330938 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.786351919 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.786417007 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.786833048 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.786851883 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.884896040 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.885380983 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.885413885 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:55.886015892 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:55.886023998 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.021502018 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.021595955 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.021665096 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.021831036 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.021850109 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.021867037 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.021872997 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.024832964 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.024883986 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.024952888 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.025100946 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.025116920 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.546428919 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.546994925 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.547019958 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.547482014 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.547492981 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.548183918 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.548523903 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.548541069 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.548863888 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.548871994 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.552503109 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.552912951 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.552934885 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.553416014 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.553422928 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.556575060 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.556967020 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.557002068 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.557391882 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.557399035 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.682996035 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.683484077 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.683564901 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.683631897 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.683631897 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.683649063 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.683659077 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.685157061 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.685606956 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.685709953 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.686826944 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.686871052 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.686965942 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.686965942 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.686970949 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.686973095 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.686976910 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.687341928 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.687355042 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.689285994 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.689317942 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.689380884 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.689541101 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.689553022 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.690438986 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.690877914 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.690985918 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.691019058 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.691035032 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.691040039 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.691046000 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.693126917 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.693142891 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.693342924 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.693342924 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.693365097 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.695708990 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.695863962 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.695946932 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.695992947 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.695992947 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.696001053 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.696008921 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.698004961 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.698018074 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.698077917 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.698368073 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.698375940 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.781687975 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.784389973 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.784425020 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.784950018 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.784955978 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.915798903 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.915884018 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.915942907 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.916160107 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.916179895 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.916193962 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.916201115 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.919595003 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.919625998 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:56.919780970 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.919902086 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:56.919917107 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.438932896 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.439742088 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.439784050 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.440305948 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.440320015 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.446300983 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.446407080 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.447040081 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.447065115 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.447638035 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.447644949 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.448000908 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.448030949 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.448508978 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.448515892 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.455014944 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.456908941 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.456919909 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.457360029 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.457365036 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.575946093 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.576029062 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.576235056 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.576289892 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.576289892 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.576309919 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.576320887 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.579345942 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.579385042 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.579531908 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.579720020 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.579732895 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.582662106 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.582725048 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.582792044 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.582964897 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.582982063 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.582997084 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.583002090 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.583154917 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.583188057 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.583250046 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.583307028 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.583471060 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.583486080 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.583508015 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.583513975 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.585891008 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.585931063 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.585995913 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.586021900 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.586042881 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.586064100 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.586237907 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.586253881 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.586277962 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.586296082 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.592997074 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.593106031 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.593172073 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.593199015 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.593219042 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.593280077 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.593328953 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.593328953 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.593343973 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.593354940 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.596069098 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.596110106 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.596174955 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.596321106 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.596339941 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.715486050 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.715986967 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.716012955 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.716540098 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.716548920 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.816450119 CEST	443	49793	142.250.186.36	192.168.2.4
Oct 22, 2024 16:05:57.816514969 CEST	443	49793	142.250.186.36	192.168.2.4
Oct 22, 2024 16:05:57.816560030 CEST	49793	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:05:57.855379105 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.855448008 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.855676889 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.855756044 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.855777979 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.855789900 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.855796099 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.858906031 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.858944893 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:57.859157085 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.859364986 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:57.859386921 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.338074923 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.338607073 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.338618994 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.339273930 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.339277983 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.340786934 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.341146946 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.341182947 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.341587067 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.341593027 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.347476959 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.347831964 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.347871065 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.348205090 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.348211050 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.352937937 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.353251934 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.353260994 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.353635073 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.353641987 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.475775003 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.475869894 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.475930929 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.476217985 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.476234913 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.476265907 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.476273060 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.477363110 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.477571011 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.477615118 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.477781057 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.477801085 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.477812052 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.477818012 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.479556084 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.479604959 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.479753017 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.480797052 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.480838060 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.480890036 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.481062889 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.481075048 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.481385946 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.481396914 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.482378960 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.482448101 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.482556105 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.482662916 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.482662916 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.482673883 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.482682943 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.485440016 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.485480070 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.485552073 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.485750914 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.485763073 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.492683887 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.492786884 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.492850065 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.492875099 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.492897034 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.493027925 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.493117094 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.493133068 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.493144989 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.493150949 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.498913050 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.498938084 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.499007940 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.499331951 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.499344110 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.611356020 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.613002062 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.613032103 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.613529921 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.613543987 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.748200893 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.748270035 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.748442888 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.748677015 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.748694897 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.748708010 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.748713017 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.751595974 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.751625061 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:58.751754999 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.751919985 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:58.751930952 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.238835096 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.239427090 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.239444971 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.239918947 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.239923954 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.240772009 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.241425037 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.241425037 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.241441011 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.241460085 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.251770020 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.252516031 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.252523899 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.253005028 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.253010035 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.257869959 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.258268118 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.258276939 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.258763075 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.258765936 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.376285076 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.376332045 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.376421928 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.376672029 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.376683950 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.376691103 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.376697063 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.377949953 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.377974987 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.378009081 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.378048897 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.378149986 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.378264904 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.378279924 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.378323078 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.378329039 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.379853010 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.379882097 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.379961967 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.380295038 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.380302906 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.380310059 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.380346060 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.380414963 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.380496025 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.380505085 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.409110069 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.409183025 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.409226894 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.409230947 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.409266949 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.409459114 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.409471035 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.409482002 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.409487009 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.412110090 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.412194967 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.412302971 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.412307024 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.412341118 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.412430048 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.412430048 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.412432909 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.412439108 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.412446976 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.414355040 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.414377928 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.414442062 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.414582014 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.414593935 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.418265104 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.418275118 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.488704920 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.489423037 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.489434958 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.489878893 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.489883900 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.624223948 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.624484062 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.624618053 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.624672890 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.624672890 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.624691963 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.624701977 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.628175020 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.628220081 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.628283024 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.628510952 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:05:59.628524065 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 22, 2024 16:05:59.763178110 CEST	49793	443	192.168.2.4	142.250.186.36
Oct 22, 2024 16:05:59.763201952 CEST	443	49793	142.250.186.36	192.168.2.4
Oct 22, 2024 16:06:00.136297941 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.136935949 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.136956930 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.137586117 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.137593031 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.142627954 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.143076897 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.143090963 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.143564939 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.143569946 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.170677900 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.171128988 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.171156883 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.171647072 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.171652079 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.188066959 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.188509941 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.188529015 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.188951969 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.188957930 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.289778948 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.289962053 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.290201902 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.290231943 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.290254116 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.290267944 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.290273905 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.290397882 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.290462017 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.290505886 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.290631056 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.290651083 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.290663004 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.290668964 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.293652058 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.293684959 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.293701887 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.293742895 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.293747902 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.293790102 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.293893099 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.293905973 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.293987036 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.294006109 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.307782888 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.307944059 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.308096886 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.308096886 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.308331966 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.308351994 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.311230898 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.311249018 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.311367989 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.311568022 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.311579943 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.326889992 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.329071045 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.329117060 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.329123020 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.329284906 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.337785006 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.337814093 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.337830067 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.337836981 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.350619078 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.350656033 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.350780010 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.352484941 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.352504015 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.420320988 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.420959949 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.420991898 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.421467066 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.421474934 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.613919973 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.614303112 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.614370108 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.614430904 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.614459038 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.614470959 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.614476919 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.617197990 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.617244005 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:00.617423058 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.617635965 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:00.617652893 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.035265923 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.035943985 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.035965919 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.036559105 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.036564112 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.050945044 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.051863909 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.051892996 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.052009106 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.052015066 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.079118013 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.079703093 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.079771042 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.080216885 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.080231905 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.096388102 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.097014904 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.097027063 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.097637892 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.097645044 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.170933962 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.171034098 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.171190977 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.171367884 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.171390057 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.171401978 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.171407938 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.174607038 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.174642086 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.174995899 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.174995899 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.175024986 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.190725088 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.190752983 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.190795898 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.190835953 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.190931082 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.191142082 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.191142082 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.191159964 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.191164017 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.194041014 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.194062948 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.194417000 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.194576979 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.194588900 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.217602015 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.217658043 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.217860937 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.217891932 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.217906952 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.217916012 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.217921019 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.223649979 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.223690987 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.226269007 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.226269007 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.226303101 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.233004093 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.233074903 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.233344078 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.233412981 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.233412981 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.233431101 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.233434916 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.236778975 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.236808062 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.237041950 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.237041950 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.237068892 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.375231028 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.375761032 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.375790119 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.376856089 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.376868010 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.512571096 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.512645006 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.512764931 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.512937069 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.512937069 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.512953997 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.512958050 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.515872002 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.515911102 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.516031981 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.516191006 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.516202927 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.945660114 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.946407080 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.946423054 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.946927071 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.946933985 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.968914032 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.969547033 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.969573021 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.970124006 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.970129013 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.987679005 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.988188982 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.988218069 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.988878012 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.988888979 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.991306067 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.991786957 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.991797924 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:01.992619991 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:01.992624998 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.085573912 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.086564064 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.086628914 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.086651087 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.086683989 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.086728096 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.086750031 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.086760998 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.086766958 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.089945078 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.089997053 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.090159893 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.090404987 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.090423107 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.109323025 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.109467983 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.109564066 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.110061884 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.110089064 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.110105991 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.110111952 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.113269091 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.113316059 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.113384008 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.113549948 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.113565922 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.123694897 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.123775005 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.123920918 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.124196053 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.124221087 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.124233961 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.124241114 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.127397060 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.127432108 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.127494097 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.127862930 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.127877951 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.134012938 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.134429932 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.134538889 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.134773016 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.134773016 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.134783030 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.134800911 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.138591051 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.138632059 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.138714075 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.138900995 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.138914108 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.265693903 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.266383886 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.266415119 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.267024994 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.267033100 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.415822029 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.415895939 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.416006088 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.416213989 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.416213989 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.416259050 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.416277885 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.419255972 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.419296980 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 22, 2024 16:06:02.419361115 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.419517994 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 22, 2024 16:06:02.419528961 CEST	443	49878	13.107.253.72	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 22, 2024 16:04:43.000248909 CEST	53	53726	1.1.1.1	192.168.2.4
Oct 22, 2024 16:04:43.081242085 CEST	53	52680	1.1.1.1	192.168.2.4
Oct 22, 2024 16:04:44.350188971 CEST	53	64919	1.1.1.1	192.168.2.4
Oct 22, 2024 16:04:45.050944090 CEST	53	50762	1.1.1.1	192.168.2.4
Oct 22, 2024 16:04:46.916872025 CEST	63301	53	192.168.2.4	1.1.1.1
Oct 22, 2024 16:04:46.916996002 CEST	57140	53	192.168.2.4	1.1.1.1
Oct 22, 2024 16:04:46.924655914 CEST	53	57140	1.1.1.1	192.168.2.4
Oct 22, 2024 16:04:46.925806046 CEST	53	63301	1.1.1.1	192.168.2.4
Oct 22, 2024 16:04:59.406061888 CEST	138	138	192.168.2.4	192.168.2.255
Oct 22, 2024 16:05:01.300451040 CEST	53	53825	1.1.1.1	192.168.2.4
Oct 22, 2024 16:05:20.096102953 CEST	53	60973	1.1.1.1	192.168.2.4
Oct 22, 2024 16:05:42.694096088 CEST	53	55670	1.1.1.1	192.168.2.4
Oct 22, 2024 16:05:43.822395086 CEST	53	62536	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 22, 2024 16:04:46.916872025 CEST	192.168.2.4	1.1.1.1	0x71ca	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 16:04:46.916996002 CEST	192.168.2.4	1.1.1.1	0x5e20	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 22, 2024 16:04:46.924655914 CEST	1.1.1.1	192.168.2.4	0x5e20	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 22, 2024 16:04:46.925806046 CEST	1.1.1.1	192.168.2.4	0x71ca	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 22, 2024 16:04:59.593769073 CEST	1.1.1.1	192.168.2.4	0xd509	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 16:04:59.593769073 CEST	1.1.1.1	192.168.2.4	0xd509	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 22, 2024 16:05:16.363872051 CEST	1.1.1.1	192.168.2.4	0x6deb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 16:05:16.363872051 CEST	1.1.1.1	192.168.2.4	0x6deb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 22, 2024 16:05:35.174530983 CEST	1.1.1.1	192.168.2.4	0x6110	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 16:05:35.174530983 CEST	1.1.1.1	192.168.2.4	0x6110	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 22, 2024 16:05:35.638267994 CEST	1.1.1.1	192.168.2.4	0xfe90	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 16:05:35.638267994 CEST	1.1.1.1	192.168.2.4	0xfe90	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 16:05:35.638267994 CEST	1.1.1.1	192.168.2.4	0xfe90	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 22, 2024 16:05:56.317835093 CEST	1.1.1.1	192.168.2.4	0x25d9	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 16:05:56.317835093 CEST	1.1.1.1	192.168.2.4	0x25d9	No error (0)	dual.s-part-0039.t-0009.fb-t-msedge.net	s-part-0039.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 16:05:56.317835093 CEST	1.1.1.1	192.168.2.4	0x25d9	No error (0)	s-part-0039.t-0009.fb-t-msedge.net		13.107.253.67	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:04:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-22 14:04:49 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=182483 Date: Tue, 22 Oct 2024 14:04:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:04:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-22 14:04:50 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=182451 Date: Tue, 22 Oct 2024 14:04:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-22 14:04:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:04:57 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=OrsvNr1cfpohnxf&MD=eN2WMcO4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-22 14:04:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 0f1a6fe4-0e78-4880-855d-afd6ccf421f0 MS-RequestId: 5bfc58c8-c334-44e8-9106-9f13236f80d9 MS-CV: IkG64MHkWkeSVIbr.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 22 Oct 2024 14:04:57 GMT Connection: close Content-Length: 24490
2024-10-22 14:04:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-22 14:04:57 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:36 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=OrsvNr1cfpohnxf&MD=eN2WMcO4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-22 14:05:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 521d21f4-e5b3-4f6f-a3ab-782562b8af07 MS-RequestId: 43b2c5cf-73a5-40da-9d46-739eb385aacb MS-CV: mg8/inE500eJ+bzi.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 22 Oct 2024 14:05:35 GMT Connection: close Content-Length: 30005
2024-10-22 14:05:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-22 14:05:36 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49751	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:36 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:36 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:36 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140536Z-r1755647c668mbb8rg8s8fbge400000003n0000000004y5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:36 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-22 14:05:36 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-22 14:05:36 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-22 14:05:36 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-22 14:05:36 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-22 14:05:36 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-22 14:05:37 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-22 14:05:37 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-22 14:05:37 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-22 14:05:37 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49754	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:38 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:38 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:38 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140538Z-r1755647c66zs9x4962sbyaz1w00000005300000000027mq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:38 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49756	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:38 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:39 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:38 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140538Z-r1755647c66d87vp2n0g7qt8bn00000005zg000000004smw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:39 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49752	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:38 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:38 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 77f74883-b01e-0001-1a50-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140538Z-17fbfdc98bbpc9nz0r22pywp0800000004n00000000008tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:39 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49753	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:38 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:39 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:38 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140538Z-r1755647c66tmf6g4720xfpwpn00000007hg000000004nb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:39 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49755	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:38 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:39 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140539Z-17fbfdc98bbgzrcvp7acfz2d3000000004eg0000000031x8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:39 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49757	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:40 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140540Z-r1755647c66mgrw7zd8m1pn55000000005a0000000004ck8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:40 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49758	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:40 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140540Z-r1755647c66wjht63r8k9qqnrs00000005eg0000000006ta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49759	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:40 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a0191c6f-501e-0047-3c5d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140540Z-17fbfdc98bb94gkbvedtsa5ef400000004b0000000004z2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49760	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:40 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140540Z-r1755647c66mgrw7zd8m1pn550000000058g0000000050a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:40 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49761	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:40 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:40 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ad393351-301e-0099-6d59-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140540Z-17fbfdc98bb96dqv0e332dtg60000000047000000000502m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:40 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49762	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:41 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:41 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 20eafa8b-401e-0067-4901-2009c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140541Z-r1755647c66zs9x4962sbyaz1w00000004zg000000004fnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:41 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49763	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:41 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:41 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140541Z-r1755647c66ww2rh494kknq3r000000007q0000000001duv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:41 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49764	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:41 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140541Z-r1755647c66mgrw7zd8m1pn55000000005c0000000001tzr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49765	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:41 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:41 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140541Z-r1755647c66xgpbhbunmn0p60w000000066g0000000017fe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:41 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49766	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:41 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:41 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:41 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140541Z-r1755647c66h2wzt2z0cr0zc740000000100000000002sm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:41 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49768	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:42 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140542Z-r1755647c669hnl7dkxy835cqc00000004k0000000004fur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49769	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:42 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c39ac956-e01e-001f-465d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140542Z-17fbfdc98bbwfg2nvhsr4h37pn00000004f0000000002n5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:42 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49770	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:42 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: c30aac03-701e-0098-3e64-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140542Z-17fbfdc98bb94gkbvedtsa5ef400000004dg000000003803 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:42 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49771	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:42 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140542Z-r1755647c66d87vp2n0g7qt8bn000000062g000000003ah9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:42 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49767	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:42 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bb9292ef-d01e-00ad-5d35-21e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140542Z-r1755647c66kv68zfmyfrbcqzg00000005cg0000000023a5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:42 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49773	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:43 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140543Z-r1755647c66k9st9tvd58z9dg800000006sg000000004qey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49775	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:43 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8ee7b399-e01e-0033-0c50-234695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140544Z-17fbfdc98bbgpkh7048gc3vfcc00000004dg0000000055t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49774	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:43 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:44 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140544Z-r1755647c66kv68zfmyfrbcqzg00000005bg000000002u3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:44 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49772	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:43 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140544Z-r1755647c66c9glmgg3prd89mn00000006y00000000016r8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49776	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:43 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:43 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140543Z-r1755647c66nxct5p0gnwngmx000000006600000000014ed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:44 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49778	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:45 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:45 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140545Z-r1755647c66dj7986akr8tvaw40000000630000000003uv5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:45 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49781	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:45 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:45 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140545Z-17fbfdc98bb9dlh7es9mrdw2qc00000004ag000000001a67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:45 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49780	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:45 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 55f0b2c4-501e-008f-5c50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140545Z-17fbfdc98bbnhb2b0umpa641c8000000048g00000000427v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49779	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:45 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140545Z-r1755647c66nfj7t97c2qyh6zg00000003mg000000004ntk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49782	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:45 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:45 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:45 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 265f42d2-801e-0047-38c8-207265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140545Z-r1755647c66x46wg1q56tyyk68000000065g000000001e3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:45 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49783	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:45 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:45 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140545Z-17fbfdc98bb6q7cv86r4xdspkg00000004dg000000003d5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:46 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49785	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:45 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 064568ba-501e-008c-7d65-23cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140545Z-17fbfdc98bb96dqv0e332dtg6000000004cg000000001s45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49786	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:45 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:46 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 319a90d3-d01e-0066-4138-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140546Z-r1755647c66sn7s9kfw6gzvyp000000006y0000000001dpz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:46 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49784	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:45 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:46 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 5fe4afb9-d01e-008e-4659-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140545Z-17fbfdc98bb6j78ntkx6e2fx4c000000049g000000002wud x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49787	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:46 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:46 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: ee1aea59-301e-0052-0750-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140546Z-17fbfdc98bb94gkbvedtsa5ef400000004bg000000004xq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:46 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49788	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:46 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:46 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: ad3e5457-301e-0099-155a-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140546Z-17fbfdc98bblptj7fr9s141cpc00000004a0000000003qtk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:46 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49789	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:46 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:46 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:46 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 95a4abee-901e-0016-6e50-23efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140546Z-17fbfdc98bbcrtjhdvnfuyp28800000004dg000000004w74 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:46 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49790	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:46 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140546Z-17fbfdc98bbnpjstwqrbe0re7n00000004dg00000000184w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:47 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49791	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:46 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:46 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140546Z-17fbfdc98bb96dqv0e332dtg600000000470000000005088 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:47 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49792	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:47 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:47 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1b8ca13b-901e-008f-4667-2067a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140547Z-r1755647c66h2wzt2z0cr0zc7400000000x0000000004zk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:47 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49794	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:47 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:47 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140547Z-r1755647c66qqfh4kbna50rqv400000007rg0000000007xk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:47 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49795	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:47 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:47 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140547Z-r1755647c66xn9fj09y3bhxnh400000007rg0000000007k9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:47 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49796	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:47 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:47 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:47 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0c1e418e-701e-0021-2a50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140547Z-17fbfdc98bbcrtjhdvnfuyp28800000004m000000000194x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:47 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49797	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:47 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:47 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:47 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b6b4fe6b-401e-008c-805d-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140547Z-17fbfdc98bbnmnfvzuhft9x8zg000000034g000000002thg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:47 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49798	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:48 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:48 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 8d905448-c01e-0079-0365-23e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140548Z-17fbfdc98bbqc8zsbguzmabx68000000048g000000003d8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:48 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49799	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:48 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:48 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f651688a-e01e-0071-5b56-2308e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140548Z-17fbfdc98bbvcvlzx1n0fduhm000000004dg000000004w12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49800	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:48 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:48 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0688ef78-901e-0029-5550-23274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140548Z-17fbfdc98bbnpjstwqrbe0re7n00000004c0000000002dvt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:48 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49802	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:48 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: ff232012-901e-0016-0292-1fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140548Z-r1755647c66ldfgxa3qp9d53us00000006tg000000004ua6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49801	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:48 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:48 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: e93de7dd-201e-006e-73e3-20bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140548Z-r1755647c66xgpbhbunmn0p60w000000065000000000216g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:48 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49803	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:49 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:49 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140549Z-r1755647c66sn7s9kfw6gzvyp000000006ug000000003kkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:49 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49805	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:49 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:49 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140549Z-17fbfdc98bbwfg2nvhsr4h37pn00000004g00000000018vb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:49 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49806	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:49 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140549Z-r1755647c66mgrw7zd8m1pn55000000005c0000000001u72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49804	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:49 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b6a35dc4-401e-008c-3156-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140549Z-17fbfdc98bb6q7cv86r4xdspkg00000004cg0000000042yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49807	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:49 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140549Z-r1755647c66c9glmgg3prd89mn00000006y00000000016x2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:49 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49808	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:50 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 0f4ad09c-101e-007a-25db-20047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140550Z-r1755647c66wjht63r8k9qqnrs00000005b0000000003xc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49809	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:50 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:50 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 750d06c7-901e-0083-2d5b-20bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140550Z-r1755647c668mbb8rg8s8fbge400000003p000000000552p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:50 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49811	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:50 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:50 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 97d7c53d-b01e-001e-2be3-200214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140550Z-r1755647c66fnxpdavnqahfp1w000000051g000000003bkd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:50 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49812	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:50 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:50 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140550Z-17fbfdc98bb6q7cv86r4xdspkg00000004e0000000002e1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49810	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:50 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:50 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:50 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8832b605-d01e-0014-3350-23ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140550Z-17fbfdc98bb9tt772yde9rhbm800000004bg000000002zrr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:50 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49813	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:51 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:51 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: e131a16a-201e-005d-6a5d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140551Z-17fbfdc98bbgzrcvp7acfz2d3000000004e0000000003hdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:51 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49814	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:51 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1c36e671-f01e-0096-085a-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140551Z-17fbfdc98bb75b2fuh11781a0n000000046g000000004szn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49815	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:51 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:51 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140551Z-17fbfdc98bbmh88pm95yr8cy5n00000003bg000000002567 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49817	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:51 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:51 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: df53dfe1-801e-0067-2856-23fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140551Z-17fbfdc98bbgzrcvp7acfz2d3000000004e0000000003he8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:51 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49816	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:51 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:51 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ae9ee863-001e-000b-78d3-2015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140551Z-r1755647c66kv68zfmyfrbcqzg00000005dg000000001cxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:51 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49818	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:51 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:52 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f2361012-b01e-003e-18e4-218e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140552Z-r1755647c66m4jttnz6nb8kzng000000057g000000005n8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:52 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49819	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:52 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140552Z-r1755647c66gb86l6k27ha2m1c00000005700000000069mh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49821	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:52 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:52 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140552Z-17fbfdc98bbgpkh7048gc3vfcc00000004k0000000001d28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:52 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49820	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:52 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:52 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140552Z-17fbfdc98bbrjvgze8aqfptnz000000004f0000000001nbe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:52 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49822	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:52 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140552Z-r1755647c66kv68zfmyfrbcqzg00000005d0000000001qz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49823	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:52 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:52 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140552Z-17fbfdc98bb9tt772yde9rhbm800000004ag000000004n6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49824	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:53 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 5871072e-001e-0034-4bb0-20dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140553Z-r1755647c66j878m0wkraqty380000000570000000005k93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49825	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:53 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f46f8e47-e01e-00aa-72c7-20ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140553Z-r1755647c66lljn2k9s29ch9ts00000006sg000000005m80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49827	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:53 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: ec87b83f-a01e-0053-3f64-238603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140553Z-17fbfdc98bblvnlh5w88rcarag00000004d0000000005wxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49826	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:53 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:53 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:53 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7699e86-701e-0050-405d-236767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140553Z-17fbfdc98bbrjvgze8aqfptnz000000004dg000000002swz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:53 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49828	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:53 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:53 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: d90f75f3-d01e-0066-095d-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140553Z-17fbfdc98bb9dlh7es9mrdw2qc000000049g0000000026gb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:53 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49830	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:54 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:54 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: fd7883f4-d01e-0017-7959-23b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140554Z-r1755647c66h2wzt2z0cr0zc7400000000x0000000004zs5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:54 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49829	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:54 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:54 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:54 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140554Z-17fbfdc98bbx4f4q0941cebmvs00000004cg00000000187y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:54 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49831	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:54 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:54 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:54 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140554Z-17fbfdc98bbqc8zsbguzmabx680000000490000000002eq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:54 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49832	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:54 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:54 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 3ee1fb64-201e-00aa-2159-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140554Z-17fbfdc98bbgzrcvp7acfz2d3000000004bg000000004cn8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:54 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49833	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:54 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:54 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:54 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 47efb004-101e-0017-69d3-2047c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140554Z-r1755647c66vrwbmeqw88hpesn00000006m0000000003y1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:54 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49837	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:55 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:55 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:55 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 514e14b5-c01e-0014-51c9-20a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140555Z-r1755647c66f2zlraraf0y5hrs000000057g000000005qvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:55 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49835	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:55 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:55 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:55 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: aaa69ab3-801e-0047-5050-237265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140555Z-17fbfdc98bbnmnfvzuhft9x8zg0000000350000000002hm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:55 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49836	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:55 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:55 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:55 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140555Z-r1755647c66gb86l6k27ha2m1c00000005eg000000000649 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:55 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49834	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:55 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:55 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:55 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5a8d2ac8-001e-0034-336b-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140555Z-17fbfdc98bbnpjstwqrbe0re7n0000000480000000004zge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:55 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49838	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:55 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:55 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 964517c6-801e-00a3-3292-1f7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140555Z-r1755647c66sn7s9kfw6gzvyp000000006v00000000047nz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:56 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49840	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:56 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:56 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140556Z-17fbfdc98bbkw9phumvsc7yy8w00000004ag000000004pdr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:56 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49842	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:56 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:56 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140556Z-r1755647c66kv68zfmyfrbcqzg00000005eg0000000005rb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:56 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49841	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:56 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:56 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: b7bcbf2c-f01e-0071-0ae2-20431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140556Z-r1755647c66sxs9zhy17bg185w00000007r0000000000t93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:56 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49839	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:56 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:56 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a52fde13-501e-0078-6a5d-2306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140556Z-17fbfdc98bb9tt772yde9rhbm800000004d0000000001pw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:56 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49843	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:56 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:56 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:56 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140556Z-17fbfdc98bb6q7cv86r4xdspkg00000004d0000000003nd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:56 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49844	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:57 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:57 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 667d1099-601e-003e-17c9-203248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140557Z-r1755647c66dj7986akr8tvaw4000000060g000000004v8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:57 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49846	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:57 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:57 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: facc6f57-201e-006e-7356-23bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140557Z-17fbfdc98bbvwcxrk0yzwg4d5800000004c00000000045ze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:57 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49845	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:57 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:57 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: e3d367a8-d01e-0028-7850-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140557Z-17fbfdc98bbqc8zsbguzmabx68000000047g00000000416u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:57 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49847	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:57 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:57 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140557Z-17fbfdc98bbnpjstwqrbe0re7n000000049g0000000043ks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:57 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49848	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:57 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:57 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:57 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 28cefb6f-601e-003d-6a50-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140557Z-17fbfdc98bbgqz661ufkm7k13c00000004900000000034kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:57 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49849	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:58 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:58 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: dc072958-d01e-0065-5150-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140558Z-17fbfdc98bblptj7fr9s141cpc000000049g0000000053sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:58 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49850	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:58 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:58 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: ee1afe0a-301e-0052-2b50-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140558Z-17fbfdc98bbmh88pm95yr8cy5n000000039g000000002vc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:58 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49852	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:58 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:58 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140558Z-r1755647c66zs9x4962sbyaz1w00000004z0000000004ccz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:58 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49851	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:58 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:58 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: c2ed4d23-701e-0098-0959-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140558Z-17fbfdc98bb94gkbvedtsa5ef400000004b0000000004zun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:58 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49853	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:58 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:58 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 5d978800-401e-000a-2456-234a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140558Z-17fbfdc98bbq2x5bzrteug30v800000004g000000000020z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:58 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49854	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:59 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:59 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:59 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140559Z-r1755647c66h2wzt2z0cr0zc74000000013000000000053q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:59 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49855	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:59 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:59 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:59 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0efe6ec1-b01e-0053-7d56-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140559Z-17fbfdc98bbvcvlzx1n0fduhm000000004h0000000002p62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:59 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49856	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:59 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:59 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:59 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 602b3158-201e-000c-61c7-2079c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140559Z-r1755647c66z4pt7cv1pnqayy400000006wg0000000028kk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:59 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49857	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:59 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:59 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:59 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140559Z-r1755647c66n5bjpba5s4mu9d000000006s0000000005xsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:59 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49858	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:05:59 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:05:59 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:05:59 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140559Z-r1755647c66kv68zfmyfrbcqzg00000005eg0000000005sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:05:59 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49860	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:00 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:00 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 2192cf97-401e-0016-59aa-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140600Z-r1755647c66fnxpdavnqahfp1w00000004y0000000005rch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:00 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49859	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:00 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:00 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140600Z-r1755647c66nfj7t97c2qyh6zg00000003qg00000000366c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:00 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49862	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:00 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:00 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 09861b75-b01e-005c-4550-234c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140600Z-17fbfdc98bb6q7cv86r4xdspkg00000004fg0000000024u2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:00 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49861	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:00 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:00 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140600Z-r1755647c66vrwbmeqw88hpesn00000006gg00000000599v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:00 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49863	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:00 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:00 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c1deb205-c01e-0034-7e92-1f2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140600Z-r1755647c66k9st9tvd58z9dg800000006x00000000021fz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:00 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49864	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:01 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:01 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1b20d623-a01e-0098-6292-1f8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140601Z-r1755647c66n5bjpba5s4mu9d000000006y0000000001smb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:01 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49865	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:01 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:01 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:01 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140601Z-17fbfdc98bb9tt772yde9rhbm800000004ag000000004ndn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:01 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49866	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:01 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:01 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b71c6767-a01e-0021-3a5a-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140601Z-17fbfdc98bb4k5z6ayu7yh2rsn00000004c0000000004mwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:01 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49867	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:01 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:01 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: fc8879c6-e01e-003c-6a59-23c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140601Z-17fbfdc98bbg2mc9qrpn009kgs00000004g0000000002y7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:01 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49868	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:01 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:01 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 18096f5a-101e-000b-7a33-215e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140601Z-r1755647c66ww2rh494kknq3r000000007pg000000002kbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:01 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49869	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:01 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:02 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140602Z-r1755647c66d87vp2n0g7qt8bn000000064g000000002nuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:02 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49870	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:01 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:02 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 728679af-d01e-007a-566c-23f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140602Z-17fbfdc98bb2fzn810kvcg2zng00000004k0000000001uvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:02 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49872	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:01 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:02 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 28e56280-601e-003d-4259-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140602Z-17fbfdc98bbgqz661ufkm7k13c00000004d00000000011bu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:02 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49871	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:01 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 8522a688-a01e-0084-2768-219ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140602Z-r1755647c66n5bjpba5s4mu9d000000006yg00000000121n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49873	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:02 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:02 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: d5695533-d01e-007a-0626-21f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140602Z-r1755647c66fnxpdavnqahfp1w000000051g000000003bv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:02 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49874	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:02 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:02 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:02 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140602Z-r1755647c66nxct5p0gnwngmx000000005zg000000005mqw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:02 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49875	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:02 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:02 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140602Z-r1755647c669hnl7dkxy835cqc00000004mg000000003h34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:03 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49876	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:02 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:02 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: ee3730f2-f01e-003f-725a-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140602Z-17fbfdc98bbnpjstwqrbe0re7n00000004dg0000000018ea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:03 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49877	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:02 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:02 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 7d169aa3-d01e-0017-7930-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140602Z-r1755647c66nxct5p0gnwngmx0000000062g000000003rm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:03 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49878	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:03 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:03 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:03 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140603Z-17fbfdc98bb6j78ntkx6e2fx4c00000004e00000000000g3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:03 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49879	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:03 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:03 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 865bbc8c-c01e-002b-3926-216e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140603Z-r1755647c66z4pt7cv1pnqayy400000006t000000000580r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:03 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49881	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:03 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:03 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5a5a6e35-401e-00a3-0b56-238b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140603Z-17fbfdc98bb2fzn810kvcg2zng00000004kg000000001hd7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:03 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49880	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:03 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:03 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140603Z-r1755647c66nxct5p0gnwngmx00000000600000000005fb6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:03 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49882	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:03 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-22 14:06:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 14:06:03 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 06d7a471-401e-0029-1427-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241022T140603Z-r1755647c66dj7986akr8tvaw4000000064g000000002dgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-22 14:06:03 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49883	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 14:06:04 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6036, Parent PID: 5288

General

Target ID:	0
Start time:	10:04:38
Start date:	22/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3732, Parent PID: 6036

General

Target ID:	2
Start time:	10:04:40
Start date:	22/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2260,i,9008067112591937361,9183123673498224839,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6320, Parent PID: 5288

General

Target ID:	3
Start time:	10:04:43
Start date:	22/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://fonts.googleapis.com/css?family=Open+Sans"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://fonts.googleapis.com/css?family=Open+Sans

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 39

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6036, Parent PID: 5288

General

Chronological Activities

Analysis Process: chrome.exePID: 3732, Parent PID: 6036

General

Chronological Activities

Analysis Process: chrome.exePID: 6320, Parent PID: 5288

General

Chronological Activities

Disassembly

Windows Analysis Report
https://fonts.googleapis.com/css?family=Open+Sans