Edit tour

Windows Analysis Report
https://jonsoo.com/

Overview

General Information

Sample URL:	https://jonsoo.com/
Analysis ID:	1540678
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2176,i,7863491789504898486,5352915076332387917,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6316 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jonsoo.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openresty/1.25.3.1Date: Wed, 23 Oct 2024 22:53:13 GMTContent-Type: text/htmlContent-Length: 575Connection: closeLast-Modified: Mon, 06 May 2024 19:16:49 GMTETag: "23f-617cde9496008"Strict-Transport-Security: max-age=31536000X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-XSS-Protection: "1; mode=block"Referrer-Policy: no-referrer-when-downgrade

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/7@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2176,i,7863491789504898486,5352915076332387917,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jonsoo.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2176,i,7863491789504898486,5352915076332387917,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
jonsoo.com	209.17.116.160	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://jonsoo.com/	false	unknown
https://jonsoo.com/favicon.ico	false	unknown
https://jonsoo.com/arrow.gif	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
209.17.116.160	jonsoo.com	United States	55002	DEFENSE-NETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540678
Start date and time:	2024-10-24 00:52:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://jonsoo.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/7@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 142.250.185.174, 64.233.166.84, 34.104.35.123, 199.232.210.172, 192.229.221.95, 40.69.42.241, 20.242.39.171, 172.217.18.3
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://jonsoo.com/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://jonsoo.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Information required to access your Control Panel can be found in your activation e-mail. This information was e-mailed to you when you first opened your account.", "prominent_button_name": "Check you Setup Email for instructions on how to access your Control Panel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://jonsoo.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Web Site Under Construction" ] }
	```json { "brands": [ "Web Site Under Construction" ] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 40

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	575
Entropy (8bit):	4.138359430274679
Encrypted:	false
SSDEEP:	12:fevU/smoxcFGReZOzNwDMlWWrbLsJji5Ib8RnBKjZQvLR:pZoWIeZUNgMUWrbLsdQIAEZ8R
MD5:	4546CEC9CC9F33AFAA19F1E81C7278FB
SHA1:	1B389A6D4D910DE0F991A27487F1E1CD8B1223DF
SHA-256:	54998B618C0740E80BD07E3B28870FD68CE831DF08DC73A8E3E3A261EFDFB720
SHA-512:	021D1061337EAAAADD78D1B2341A88E7534183A7B3EF74AF96F07D7339F32F5D08EE9A220CF0E14861F321791CC7608177707968312F1D2AD9C7347BAE7F9D23
Malicious:	false
Reputation:	low
URL:	https://jonsoo.com/favicon.ico
Preview:	<div>. <p>. <b>404: Page not found</b>. <br/>. This error is generated when there was no web page with the name you specified at the web site.. </p>. <p>. <b>. Troubleshooting suggestions:. </b>. </p>. <p>. Ensure the page you are linking to exists in the correct folder.. </p>. <p>. Check your file name for case sensitivity . Index.htm is not the same as index.htm!. </p>. <p>. Temporarily disable any rewrite rules by renaming your .htaccess file if it exists.. </p>.</div>..

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CR, LF line terminators
Category:	downloaded
Size (bytes):	3729
Entropy (8bit):	4.660432744199372
Encrypted:	false
SSDEEP:	96:KfsYJSFJtJLsnJmHJRN5UPEeXe98uQycI61zUqztgXAgufNENBPJnR:K0kO7QJmpJSEeXwzcI61zUqzGX9R
MD5:	9F35A57069A0269FFD5DACB51809DF5F
SHA1:	4010078D16D872A501707E58B877C10AF283BBA1
SHA-256:	47DB819A9F22E837592C5DAAAA7C244603B0C0DC9DDA9AB2BBD453D995355F6D
SHA-512:	480D577A00D41EEAF9FED7547746313E0A32FE27CCE4A055DECC8ED390D7A643FE6E88D6C30FF9860D8A19CABDD71B5A21E12CFF45BF3BC21D2C14BDA6D18AC1
Malicious:	false
Reputation:	low
URL:	https://jonsoo.com/
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"."http://www.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Under Construction</title>.<style type="text/css">. ..style1 {..font-family: Verdana, Arial, Helvetica, sans-serif;..font-size: 25px;..color: #FFFFFF;.}..style2 {.font-family: Verdana, Arial, Helvetica, sans-serif;..font-size: 12px;.}..style3 {..font-family: Verdana, Arial, Helvetica, sans-serif;..font-size: 11px;..color: #333333;..font-weight: bold;.}..style8 {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; font-weight: bold; }..style10 {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 11px; color: #666666; }.-->.</style>.</head>..<body>.<p> </p>.<p> </p>.<table width="600" border="0" align="center" cellpadding="0" cellspacing="0">. <tr>. <td><table width="100%" border="0" cellspacing="0" cellpadding="0">. <tr>. <td height="18"

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 105 x 104
Category:	dropped
Size (bytes):	5605
Entropy (8bit):	7.725186185409345
Encrypted:	false
SSDEEP:	96:idEEyDWkvP8gEqH7Dd97lf0fd8XOv8dVn9nZmOM2CrnhAVPT7eFyJM2QG34qTs:id3gEqHPp0V5UdVNZBCrOs26
MD5:	BEF5AC5D75EE5753C856883E4AF13051
SHA1:	705E909151E496FF57298CAD3FDD538CC4C35E92
SHA-256:	0A16D88D1A781D840777D18ED41B0C50DE70D046593F9F2B7742E0449D55BE68
SHA-512:	1A78D3E360D578E2CB36A542EC248DFC66CF006AD3761A86ADFECB4E7B7DF4F2E1B257D8DB43C1A6BFBF76C0EF1F51C4E2A449992FEB264ADD83E978021CADDC
Malicious:	false
Reputation:	low
Preview:	GIF89ai.h..........kt~......jz.......ly.......p~...........py............nx.{.....pz.qx~........................s..iy..............ft.v..t}.......mz.hu.......m\|....fr\|......iv....mv.r{.............n\|..........jw.........................o}.nw~......eox...x\|.rv....sy.kw..........ow.r\|..........tz....u{.v..ksygx....\|.................k{.k\|.jy.z}.oz....hx.o.....r.....k{.......bjr...............!.......,....i.h............~........................{.{..\|....\|...{.....................~..........@.}..<..1..66.6-.\|>>\|}<<.}.....(.5..(...1h.,v.k..[@4.\|...].i@..GM..w...`.'...3>..9r.....t.q.Z....M...M...NI......&.H.... &"x.@...p.j...&4>1:t %Jd...(`X.....M0.9..lZ1..tP.0....E....G.AGXt...K.....H.C..&9.c8[.....@x0..Qqp.=.hOH..<TF....L~..2D6.!.n.X.c...w..FPa...%G..C...a f.....8...$.w%^.8)q...r...2vL..T>JP.J..l.x......$......61F...A...$A....5...@....x...{..G.>.dM...B.1..w......JL...:.....0p.G;.h....@.......)\.... t...}`1..~.2.).4N.........E..D@B..........G38@A.+............5{..e.

Chrome Cache Entry: 43

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 105 x 104
Category:	downloaded
Size (bytes):	5605
Entropy (8bit):	7.725186185409345
Encrypted:	false
SSDEEP:	96:idEEyDWkvP8gEqH7Dd97lf0fd8XOv8dVn9nZmOM2CrnhAVPT7eFyJM2QG34qTs:id3gEqHPp0V5UdVNZBCrOs26
MD5:	BEF5AC5D75EE5753C856883E4AF13051
SHA1:	705E909151E496FF57298CAD3FDD538CC4C35E92
SHA-256:	0A16D88D1A781D840777D18ED41B0C50DE70D046593F9F2B7742E0449D55BE68
SHA-512:	1A78D3E360D578E2CB36A542EC248DFC66CF006AD3761A86ADFECB4E7B7DF4F2E1B257D8DB43C1A6BFBF76C0EF1F51C4E2A449992FEB264ADD83E978021CADDC
Malicious:	false
Reputation:	low
URL:	https://jonsoo.com/arrow.gif
Preview:	GIF89ai.h..........kt~......jz.......ly.......p~...........py............nx.{.....pz.qx~........................s..iy..............ft.v..t}.......mz.hu.......m\|....fr\|......iv....mv.r{.............n\|..........jw.........................o}.nw~......eox...x\|.rv....sy.kw..........ow.r\|..........tz....u{.v..ksygx....\|.................k{.k\|.jy.z}.oz....hx.o.....r.....k{.......bjr...............!.......,....i.h............~........................{.{..\|....\|...{.....................~..........@.}..<..1..66.6-.\|>>\|}<<.}.....(.5..(...1h.,v.k..[@4.\|...].i@..GM..w...`.'...3>..9r.....t.q.Z....M...M...NI......&.H.... &"x.@...p.j...&4>1:t %Jd...(`X.....M0.9..lZ1..tP.0....E....G.AGXt...K.....H.C..&9.c8[.....@x0..Qqp.=.hOH..<TF....L~..2D6.!.n.X.c...w..FPa...%G..C...a f.....8...$.w%^.8)q...r...2vL..T>JP.J..l.x......$......61F...A...$A....5...@....x...{..G.>.dM...B.1..w......JL...:.....0p.G;.h....@.......)\.... t...}`1..~.2.).4N.........E..D@B..........G38@A.+............5{..e.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 00:53:03.612914085 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 00:53:08.535955906 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:08.535980940 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:08.536043882 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:08.536346912 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:08.536379099 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:08.536432028 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:08.536854982 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:08.536865950 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:08.537154913 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:08.537179947 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:09.933767080 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:09.933815002 CEST	443	49739	142.250.185.196	192.168.2.4
Oct 24, 2024 00:53:09.934021950 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:09.934448957 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:09.934468031 CEST	443	49739	142.250.185.196	192.168.2.4
Oct 24, 2024 00:53:10.438056946 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.449887037 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.449907064 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.451200008 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.451276064 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.453267097 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.468647957 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.468836069 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.469089985 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.469119072 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.469432116 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.469455004 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.471086979 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.471168995 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.474615097 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.474814892 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.518794060 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.518795013 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.518826962 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.565001965 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.682488918 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.682524920 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.682631969 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.682674885 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.682708979 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.800865889 CEST	443	49739	142.250.185.196	192.168.2.4
Oct 24, 2024 00:53:10.849602938 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:10.868905067 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:10.868932962 CEST	443	49739	142.250.185.196	192.168.2.4
Oct 24, 2024 00:53:10.870203972 CEST	443	49739	142.250.185.196	192.168.2.4
Oct 24, 2024 00:53:10.870347023 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:10.886821032 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:10.886924982 CEST	443	49739	142.250.185.196	192.168.2.4
Oct 24, 2024 00:53:10.926457882 CEST	49737	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.926498890 CEST	443	49737	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.927767038 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:10.937068939 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:10.937099934 CEST	443	49739	142.250.185.196	192.168.2.4
Oct 24, 2024 00:53:10.971338034 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:10.981331110 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:11.064063072 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:11.064109087 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:11.064237118 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:11.066615105 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:11.066638947 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:11.116044044 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:11.116070032 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:11.116079092 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:11.116146088 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:11.116147041 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:11.116189957 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:11.117572069 CEST	49736	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:11.117588997 CEST	443	49736	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:11.131766081 CEST	49741	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:11.131808996 CEST	443	49741	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:11.131880999 CEST	49741	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:11.132091999 CEST	49741	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:11.132108927 CEST	443	49741	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:11.421574116 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:11.421627045 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:11.421695948 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:11.421973944 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:11.421988964 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:11.914052963 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:11.914263010 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:11.918067932 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:11.918090105 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:11.918416977 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:11.959086895 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:12.003335953 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:12.201658964 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:12.201742887 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:12.201814890 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:12.201941967 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:12.201960087 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:12.201997995 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:12.202004910 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:12.241643906 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:12.241693020 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:12.241764069 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:12.242111921 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:12.242127895 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:12.876586914 CEST	443	49741	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:12.877082109 CEST	49741	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:12.877110958 CEST	443	49741	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:12.877578020 CEST	443	49741	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:12.877952099 CEST	49741	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:12.878047943 CEST	443	49741	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:12.878098011 CEST	49741	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:12.919342041 CEST	443	49741	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:12.923927069 CEST	49741	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.067732096 CEST	443	49741	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.067810059 CEST	443	49741	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.067903996 CEST	49741	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.069550037 CEST	49741	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.069570065 CEST	443	49741	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.075444937 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:13.075551033 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:13.078696012 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:13.078705072 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:13.079011917 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:13.108046055 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:13.132738113 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.135216951 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.135243893 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.136475086 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.136547089 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.137064934 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.137137890 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.137236118 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.137243032 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.151338100 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:13.189543962 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.351701975 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:13.351792097 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:13.351883888 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:13.356350899 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:13.356375933 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:13.356388092 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:53:13.356394053 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 00:53:13.557686090 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.557718992 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.557744026 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.557801008 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.557811975 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:13.557827950 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.557853937 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.559096098 CEST	49742	443	192.168.2.4	209.17.116.160
Oct 24, 2024 00:53:13.559118986 CEST	443	49742	209.17.116.160	192.168.2.4
Oct 24, 2024 00:53:17.591336012 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:17.591387033 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:17.591458082 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:17.597815037 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:17.597834110 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:18.353667974 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:18.353780985 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:18.358165979 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:18.358196020 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:18.358474016 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:18.412947893 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:20.104259968 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:20.151328087 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.355781078 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.355807066 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.355814934 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.355844975 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.355861902 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.355871916 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.355894089 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:20.355906963 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.355930090 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:20.355967045 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:20.356729031 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.356822968 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:20.356826067 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.357187986 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.357350111 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:20.831029892 CEST	443	49739	142.250.185.196	192.168.2.4
Oct 24, 2024 00:53:20.831104040 CEST	443	49739	142.250.185.196	192.168.2.4
Oct 24, 2024 00:53:20.831332922 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:20.997303009 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:20.997303009 CEST	49744	443	192.168.2.4	172.202.163.200
Oct 24, 2024 00:53:20.997329950 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:20.997343063 CEST	443	49744	172.202.163.200	192.168.2.4
Oct 24, 2024 00:53:21.338692904 CEST	80	49723	217.20.57.34	192.168.2.4
Oct 24, 2024 00:53:21.339329958 CEST	49723	80	192.168.2.4	217.20.57.34
Oct 24, 2024 00:53:21.343061924 CEST	49723	80	192.168.2.4	217.20.57.34
Oct 24, 2024 00:53:21.350018024 CEST	80	49723	217.20.57.34	192.168.2.4
Oct 24, 2024 00:53:22.488929033 CEST	49739	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:53:22.488959074 CEST	443	49739	142.250.185.196	192.168.2.4
Oct 24, 2024 00:53:57.585222006 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:57.585270882 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:57.585333109 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:57.585793972 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:57.585803986 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.485088110 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:58.485119104 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:58.485409975 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:58.485841036 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:58.485855103 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:58.512482882 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.512586117 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:58.516774893 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:58.516782999 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.517110109 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.526742935 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:58.571341038 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.837789059 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.837817907 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.837833881 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.837939978 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:58.837965965 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.838025093 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:58.955436945 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.955465078 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.955542088 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:58.955554962 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.955601931 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:58.955684900 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.955743074 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.955789089 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:58.955920935 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:58.955931902 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:58.955941916 CEST	49750	443	192.168.2.4	52.149.20.212
Oct 24, 2024 00:53:58.955948114 CEST	443	49750	52.149.20.212	192.168.2.4
Oct 24, 2024 00:53:59.239845037 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.239908934 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.242058992 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.242079973 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.242352009 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.252232075 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.299333096 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.500211954 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.500241041 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.500257015 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.500452995 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.500478983 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.500524998 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.619049072 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.619092941 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.619157076 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.619185925 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.619215012 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.619251966 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.738419056 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.738440990 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.738507032 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.738523960 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.738579988 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.895032883 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.895061016 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.895129919 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.895148039 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.895163059 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.895189047 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.988204002 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.988228083 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.988296032 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:53:59.988305092 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:53:59.988480091 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.094259024 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.094283104 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.094338894 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.094363928 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.094389915 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.094417095 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.213037968 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.213063002 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.213175058 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.213239908 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.213305950 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.331943035 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.331963062 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.332045078 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.332052946 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.332093000 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.450442076 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.450468063 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.450548887 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.450612068 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.450647116 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.450669050 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.493590117 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.493613005 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.493711948 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.493740082 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.493779898 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.570688009 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.570696115 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.570836067 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.570894957 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.571000099 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.688111067 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.688137054 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.688215017 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.688242912 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.688558102 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.806574106 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.806598902 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.806674957 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.806699038 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.807471991 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.807534933 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.807724953 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.807734966 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.807745934 CEST	49751	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.807750940 CEST	443	49751	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.894280910 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.894376040 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.894634008 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.896825075 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.896856070 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.896972895 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.897028923 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.897222996 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.897411108 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.897423983 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.898807049 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.898833990 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.899288893 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.899322033 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.899350882 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.900288105 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.900321007 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.900377035 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.900504112 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.900525093 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.900585890 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.900585890 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.900624037 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:00.900672913 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:00.900686026 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.643469095 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.643992901 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.644953966 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.644980907 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.646574020 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.646586895 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.647672892 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.648499966 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.648536921 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.649878025 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.649894953 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.650557995 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.650568962 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.650911093 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.650919914 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.651982069 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.652935982 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.652956963 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.653600931 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.653608084 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.780141115 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.780220032 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.780263901 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.780757904 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.780786991 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.780833960 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.780848980 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.780888081 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.780972958 CEST	49756	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.780988932 CEST	443	49756	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.781585932 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.781642914 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.781682014 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.783170938 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.783181906 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.783195972 CEST	49752	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.783209085 CEST	443	49752	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.783902884 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.783950090 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.784049034 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.784085035 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.784142017 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.787487984 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.787516117 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.787559032 CEST	49755	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.787564993 CEST	443	49755	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.790493965 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.790617943 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.790709972 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.790715933 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.790759087 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.791120052 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.791132927 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.791147947 CEST	49753	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.791148901 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.791151047 CEST	443	49753	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.793807983 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.793827057 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.795900106 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.795927048 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.795991898 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.796345949 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.796355009 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.800750017 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.800784111 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.800972939 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.801151991 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.801187992 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.801233053 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.801528931 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.801542044 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.801734924 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.801759005 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.976955891 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.977535009 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.977565050 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:01.978283882 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:01.978288889 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.115390062 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.115448952 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.115504026 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.115523100 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.115566015 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.115609884 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.116049051 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.116065025 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.116076946 CEST	49754	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.116082907 CEST	443	49754	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.120634079 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.120672941 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.120738029 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.120888948 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.120894909 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.532506943 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.533822060 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.535465002 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.535478115 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.535981894 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.535981894 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.536004066 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.536026955 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.536178112 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.536180973 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.544397116 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.545490026 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.545514107 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.546657085 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.546663046 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.553236008 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.556987047 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.556987047 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.557034016 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.557045937 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.666670084 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.666727066 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.666749001 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.666802883 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.667186022 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.667220116 CEST	49757	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.667228937 CEST	443	49757	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.667237997 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.669291019 CEST	49758	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.669305086 CEST	443	49758	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.673059940 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.673095942 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.673161030 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.673682928 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.673700094 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.675353050 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.675389051 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.675481081 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.675590992 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.675601006 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.689234018 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.689306974 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.689779043 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.689949036 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.689970016 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.689982891 CEST	49759	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.689989090 CEST	443	49759	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.694053888 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.694108963 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.694179058 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.694330931 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.694341898 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.766597033 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.766834021 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.766923904 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.767045021 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.767066956 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.767085075 CEST	49760	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.767091036 CEST	443	49760	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.770092010 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.770170927 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.770267963 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.770442963 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.770461082 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.959093094 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.959640026 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.959661961 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:02.960376978 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:02.960386038 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.094129086 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.094233990 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.094341993 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.094568968 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.094585896 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.094599009 CEST	49761	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.094604969 CEST	443	49761	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.097820997 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.097858906 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.097924948 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.098632097 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.098644972 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.400222063 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.406555891 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.406589985 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.407222033 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.407227993 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.417342901 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.418047905 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.418076992 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.418857098 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.418864012 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.420847893 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.422013044 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.422032118 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.423337936 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.423345089 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.524621964 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.526482105 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.526519060 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.527759075 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.527766943 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.535152912 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.535254955 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.535423040 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.535639048 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.535656929 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.535696983 CEST	49762	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.535702944 CEST	443	49762	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.544053078 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.544114113 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.544198990 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.544553041 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.544579029 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.554537058 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.554630041 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.554811954 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.555103064 CEST	49763	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.555124044 CEST	443	49763	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.555588961 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.555763006 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.555824041 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.556181908 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.556196928 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.556207895 CEST	49764	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.556214094 CEST	443	49764	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.564596891 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.564621925 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.564693928 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.565026999 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.565037012 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.568370104 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.568406105 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.568504095 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.568682909 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.568695068 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.658138037 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.658205032 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.658365965 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.659068108 CEST	49765	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.659084082 CEST	443	49765	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.667510986 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.667558908 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.667669058 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.667977095 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.667993069 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.824115992 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.824898958 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.824918032 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.825766087 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.825771093 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.956547976 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.956772089 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.956839085 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.986430883 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.986455917 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.986501932 CEST	49766	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.986510038 CEST	443	49766	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.993000031 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.993040085 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:03.993197918 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.993746996 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:03.993763924 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.296617031 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.313213110 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.313239098 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.326167107 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.333853960 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.334116936 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.334141016 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.360385895 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.360416889 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.360893011 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.360898972 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.371068001 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.371083975 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.383888960 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.383903027 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.393882036 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.394375086 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.394403934 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.394857883 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.394862890 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.464510918 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.464823008 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.464915037 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.464956045 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.464975119 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.464987040 CEST	49767	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.464994907 CEST	443	49767	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.467714071 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.467755079 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.467897892 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.468043089 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.468054056 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.488620996 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.488730907 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.488799095 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.489044905 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.489059925 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.489089966 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.489098072 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.492052078 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.492095947 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.492162943 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.492352009 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.492362022 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.514013052 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.514208078 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.514359951 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.514360905 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.514383078 CEST	49769	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.514400959 CEST	443	49769	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.517374039 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.517424107 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.517632008 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.517786980 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.517800093 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.529123068 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.534205914 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.534287930 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.534337997 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.534358978 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.534372091 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.534378052 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.537350893 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.537400961 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.537488937 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.537672043 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.537688017 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.736437082 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.736999035 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.737020016 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.737608910 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.737615108 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.869992971 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.870457888 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.870539904 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.870727062 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.870727062 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.870758057 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.870768070 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.874541044 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.874578953 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:04.874809027 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.875010967 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:04.875025034 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.208158970 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.208687067 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.208717108 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.209264040 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.209270954 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.242379904 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.242968082 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.242991924 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.243423939 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.243432045 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.270404100 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.270889044 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.270908117 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.271224022 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.271372080 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.271383047 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.271589994 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.271603107 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.272027016 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.272033930 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.357032061 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.357111931 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.357206106 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.357386112 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.357405901 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.357419014 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.357425928 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.360120058 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.360152960 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.360352993 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.360524893 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.360542059 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.379925966 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.379988909 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.380171061 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.380249977 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.380261898 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.380275965 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.380280972 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.383003950 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.383042097 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.383336067 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.383512974 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.383524895 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.406097889 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.406795025 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.406878948 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.407005072 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.407005072 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.407005072 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.407656908 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.407711983 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.407742023 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.407754898 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.409823895 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.409854889 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.409908056 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.409930944 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.409939051 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.409997940 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.410070896 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.410080910 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.410162926 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.410176039 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.621114969 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.621527910 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.621542931 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.622040987 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.622046947 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.721349001 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.721375942 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.756694078 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.756763935 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.756833076 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.757061005 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.757074118 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.757088900 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.757093906 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.760257959 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.760293007 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:05.760349035 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.760535002 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:05.760548115 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.109513998 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.110083103 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.110102892 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.110543013 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.110549927 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.121792078 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.122260094 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.122277021 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.122697115 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.122701883 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.154002905 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.154510021 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.154536009 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.154956102 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.154963970 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.163916111 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.164398909 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.164414883 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.164834976 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.164839983 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.245621920 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.246164083 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.246247053 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.246329069 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.246350050 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.246367931 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.246375084 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.249217987 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.249259949 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.249329090 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.249484062 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.249496937 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.254184961 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.254268885 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.254329920 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.254591942 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.254607916 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.254625082 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.254631996 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.257570982 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.257611990 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.257841110 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.258049965 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.258061886 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.287468910 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.287540913 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.287601948 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.287931919 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.287952900 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.287965059 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.287971020 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.290935040 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.290987015 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.291052103 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.291239023 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.291255951 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.300271988 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.300466061 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.300528049 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.300571918 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.300590992 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.300606012 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.300612926 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.303452969 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.303504944 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.303574085 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.303706884 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.303721905 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.497541904 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.498066902 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.498087883 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.498533964 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.498539925 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.633115053 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.634816885 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.634912968 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.634965897 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.634983063 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.634995937 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.635001898 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.638981104 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.639034033 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:06.640077114 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.640410900 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:06.640429020 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.003752947 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.004228115 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.004260063 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.004666090 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.004673958 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.018672943 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.019334078 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.019346952 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.020029068 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.020037889 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.038238049 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.038805008 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.038849115 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.039244890 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.039252996 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.042460918 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.043334961 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.043375969 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.043715954 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.043725014 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.141056061 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.141359091 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.141418934 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.141452074 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.141464949 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.141479969 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.141484976 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.144200087 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.144244909 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.144598007 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.144742966 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.144757032 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.155019045 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.155446053 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.155517101 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.155560017 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.155560017 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.155581951 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.155596972 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.158277988 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.158293962 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.158375025 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.158579111 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.158590078 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.172353983 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.172462940 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.172514915 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.172708988 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.172727108 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.172733068 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.172739029 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.175200939 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.175328970 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.175671101 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.175671101 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.175765038 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.175786972 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.175843954 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.175860882 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.175879002 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.176028967 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.176039934 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.178190947 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.178204060 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.178356886 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.178518057 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.178528070 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.386404991 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.386945009 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.386961937 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.387419939 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.387425900 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.519557953 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.519675016 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.519850016 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.519891977 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.519912004 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.519926071 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.519932032 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.523101091 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.523148060 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:07.523489952 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.523567915 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:07.523576975 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.897727966 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.898363113 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:08.898387909 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.898704052 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:08.898710012 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.898782015 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.899068117 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:08.899092913 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.899406910 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:08.899411917 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.900660038 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.900942087 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:08.900949001 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.901401997 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:08.901407003 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.905132055 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.905277014 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.905561924 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:08.905572891 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.905786037 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:08.905792952 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.906126976 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:08.906131983 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:08.906183958 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:08.906188011 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.031903028 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.032128096 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.032198906 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.032228947 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.032246113 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.032255888 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.032260895 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.035007000 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.035051107 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.035121918 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.035249949 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.035270929 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.038652897 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.038718939 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.038767099 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.038804054 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.038832903 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.038872004 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.038923025 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.038932085 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.038980007 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.038984060 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.038995028 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.039001942 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.041438103 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.041472912 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.041604042 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.041613102 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.041632891 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.041695118 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.041863918 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.041892052 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.041929960 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.041943073 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.042311907 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.042562962 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.042613029 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.042639017 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.042643070 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.042651892 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.042655945 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.043400049 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.043459892 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.043601036 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.043751955 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.043751955 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.043760061 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.043764114 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.044832945 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.044848919 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.044943094 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.045073032 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.045085907 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.045419931 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.045437098 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.045523882 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.045624971 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.045636892 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.771194935 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.771703005 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.771749020 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.772167921 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.772176027 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.783205032 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.783721924 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.783739090 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.784207106 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.784214020 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.787103891 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.787606001 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.787616968 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.788041115 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.788047075 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.797772884 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.798371077 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.798388004 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.798814058 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.798818111 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.811259031 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.811700106 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.811722994 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.812190056 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.812199116 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.906627893 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.906850100 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.906919956 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.907088041 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.907109022 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.907138109 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.907145977 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.910315990 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.910358906 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.910425901 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.910636902 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.910651922 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.922674894 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.923011065 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.923239946 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.923341990 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.923388004 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.923402071 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.923415899 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.923422098 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.923453093 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.923512936 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.924012899 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.924035072 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.924048901 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.924057007 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.926803112 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.926814079 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.926826954 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.926855087 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.926883936 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.926925898 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.927090883 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.927103043 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.927145004 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.927156925 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.931938887 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.932024956 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.932086945 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.932290077 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.932308912 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.932320118 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.932326078 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.935080051 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.935112953 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.935172081 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.935348988 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.935362101 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.950478077 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.950628042 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.950685024 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.950835943 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.950851917 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.950870991 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.950876951 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.954200983 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.954236984 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.954322100 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.954562902 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:09.954576969 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:09.988351107 CEST	49803	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:54:09.988392115 CEST	443	49803	142.250.185.196	192.168.2.4
Oct 24, 2024 00:54:09.988524914 CEST	49803	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:54:09.988769054 CEST	49803	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:54:09.988784075 CEST	443	49803	142.250.185.196	192.168.2.4
Oct 24, 2024 00:54:10.655945063 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.656466007 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.656481028 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.656955004 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.656960011 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.675323963 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.676126957 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.676140070 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.676565886 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.676572084 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.681113958 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.681365013 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.681603909 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.681612968 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.681840897 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.681862116 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.682276964 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.682291031 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.682297945 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.682303905 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.736515045 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.737313986 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.737345934 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.737833977 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.737842083 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.791810036 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.791946888 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.792023897 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.792210102 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.792224884 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.792248011 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.792253971 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.795114994 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.795159101 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.795362949 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.795550108 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.795561075 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.817533016 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.817588091 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.817779064 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.817835093 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.817893028 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.819231033 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.820283890 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.820297956 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.820308924 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.820313931 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.820467949 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.820487976 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.820518017 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.820524931 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.822462082 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.822844982 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.822937965 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.823090076 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.823090076 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.823108912 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.823118925 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.827260017 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.827291012 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.827548981 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.828326941 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.828368902 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.828448057 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.829299927 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.829310894 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.829502106 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.829518080 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.829547882 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.829696894 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.829706907 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.829828024 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.829843044 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.856400967 CEST	443	49803	142.250.185.196	192.168.2.4
Oct 24, 2024 00:54:10.856678009 CEST	49803	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:54:10.856710911 CEST	443	49803	142.250.185.196	192.168.2.4
Oct 24, 2024 00:54:10.857043028 CEST	443	49803	142.250.185.196	192.168.2.4
Oct 24, 2024 00:54:10.857681036 CEST	49803	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:54:10.857745886 CEST	443	49803	142.250.185.196	192.168.2.4
Oct 24, 2024 00:54:10.875441074 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.875514984 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.875665903 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.875751972 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.875773907 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.875865936 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.875874043 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.878938913 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.878983974 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.879045963 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.879272938 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:10.879278898 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:10.909157991 CEST	49803	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:54:11.547341108 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.547872066 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.547897100 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.548336029 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.548341990 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.567723036 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.568228006 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.568248987 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.568362951 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.568804026 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.568810940 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.568885088 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.568900108 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.569294930 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.569299936 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.593192101 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.593672991 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.593687057 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.594110966 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.594115973 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.631068945 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.631627083 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.631654978 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.632067919 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.632072926 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.683723927 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.683873892 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.683990955 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.684159994 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.684178114 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.684187889 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.684194088 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.687381029 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.687418938 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.687520027 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.688002110 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.688023090 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.701718092 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.701960087 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.702024937 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.702085972 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.702092886 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.702105999 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.702111959 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.706175089 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.706203938 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.706367016 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.706585884 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.706598043 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.709039927 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.709273100 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.709361076 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.709408045 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.709414005 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.709427118 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.709431887 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.712420940 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.712450981 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.712542057 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.712882996 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.712897062 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.771116018 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.771272898 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.771353006 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.771431923 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.771449089 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.771459103 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.771465063 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.774136066 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.774184942 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.774678946 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.774873972 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.774885893 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.935929060 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.936053038 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.936120987 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.936376095 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.936398029 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.936412096 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.936418056 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.939516068 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.939536095 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:11.939642906 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.939897060 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:11.939908028 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.415659904 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.416313887 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.416332960 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.416743994 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.416749001 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.448237896 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.448760033 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.448802948 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.449218035 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.449228048 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.453159094 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.453809977 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.453825951 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.453974009 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.453978062 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.503575087 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.504100084 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.504112005 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.504659891 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.504664898 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.547815084 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.547889948 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.548084021 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.548130989 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.548130989 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.548149109 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.548156977 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.552313089 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.552347898 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.552732944 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.553070068 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.553082943 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.583127975 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.583720922 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.583770990 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.583813906 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.583832979 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.583844900 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.583851099 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.586303949 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.586344957 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.586571932 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.586711884 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.586725950 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.588013887 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.588076115 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.588227034 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.588253975 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.588253975 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.588269949 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.588280916 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.590292931 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.590341091 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.590403080 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.590554953 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.590574026 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.639539003 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.639607906 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.639679909 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.639949083 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.639966965 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.639980078 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.639986038 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.642882109 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.642931938 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.643052101 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.643245935 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.643260002 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.692606926 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.693134069 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.693151951 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.693730116 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.693737984 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.825990915 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.826148033 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.826261997 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.826344013 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.826344013 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.826358080 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.826368093 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.829348087 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.829392910 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:12.829529047 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.829762936 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:12.829783916 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.307463884 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.308039904 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.308083057 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.308617115 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.308624983 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.329341888 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.329931974 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.329956055 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.330569983 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.330579042 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.333372116 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.333751917 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.333770990 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.334183931 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.334191084 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.387556076 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.388114929 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.388153076 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.388708115 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.388719082 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.448344946 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.448410034 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.448474884 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.448632002 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.448647976 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.448662996 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.448668957 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.451812029 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.451849937 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.452173948 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.452307940 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.452322006 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.462784052 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.462855101 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.463140965 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.463191986 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.463191986 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.463216066 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.463229895 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.465924025 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.465966940 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.466034889 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.466207027 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.466223001 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.468327045 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.469063044 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.469155073 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.469180107 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.469197989 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.469212055 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.469218969 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.471806049 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.471837997 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.471906900 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.472124100 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.472131014 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.523468018 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.523773909 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.523845911 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.523890972 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.523910046 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.523921967 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.523926973 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.527095079 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.527139902 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.527215004 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.527415037 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.527431011 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.578572035 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.579587936 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.579610109 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.580605030 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.580620050 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.714380980 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.714454889 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.714559078 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.714739084 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.714760065 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.714775085 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.714791059 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.718188047 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.718236923 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:13.718307972 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.718502998 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:13.718519926 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.192203999 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.192822933 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.192852974 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.193599939 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.193607092 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.211366892 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.211931944 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.211967945 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.212651968 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.212657928 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.218367100 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.219271898 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.219289064 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.219952106 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.219957113 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.277245045 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.277818918 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.277837038 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.278597116 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.278603077 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.369015932 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.369091988 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.369316101 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.369386911 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.369539976 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.369580030 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.369601965 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.369610071 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.369642973 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.369649887 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.371772051 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.371789932 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.371800900 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.371807098 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.375189066 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.375219107 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.375381947 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.376106977 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.376174927 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.376223087 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.376606941 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.376643896 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.376733065 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.376966953 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.376981974 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.377216101 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.377239943 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.377254963 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.377259970 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.380661964 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.380672932 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.380841970 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.380966902 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.380978107 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.381161928 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.381176949 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.492258072 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.492332935 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.492436886 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.493976116 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.493989944 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.494015932 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.494021893 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.499113083 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.499150038 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.499483109 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.499794960 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.499819040 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.502476931 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.502896070 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.502922058 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.504132032 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.504137039 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.635432959 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.635504007 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.635818958 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.636956930 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.636967897 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.636981964 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.636992931 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.641387939 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.641426086 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:14.642086983 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.642386913 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:14.642399073 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.161851883 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.162445068 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.162457943 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.162983894 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.162991047 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.186561108 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.187094927 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.187122107 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.187654972 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.187660933 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.190747023 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.191195011 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.191215992 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.191605091 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.191610098 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.229188919 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.229728937 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.229756117 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.230249882 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.230261087 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.289479017 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.289823055 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.290092945 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.290178061 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.290178061 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.290199041 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.290209055 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.293824911 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.293869019 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.294002056 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.294162035 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.294173956 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.321286917 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.321506023 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.321566105 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.321715117 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.321731091 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.321743965 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.321749926 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.322608948 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.322679996 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.322820902 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.323004007 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.323009014 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.323020935 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.323025942 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.331593990 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.331630945 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.331716061 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.331880093 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.331919909 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.331981897 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.332040071 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.332048893 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.332308054 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.332323074 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.381447077 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.382050991 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.382067919 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.382688999 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.382694006 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.447489023 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.447556973 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.447705030 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.448086977 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.448086977 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.448106050 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.448116064 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.451868057 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.451963902 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.453052044 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.453427076 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.453461885 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.512300014 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.512613058 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.512689114 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.512921095 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.512933016 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.516551018 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.516596079 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:15.516683102 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.516881943 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:15.516901016 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.022244930 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.062280893 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.073823929 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.082469940 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.112319946 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.127947092 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.169019938 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.169030905 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.170067072 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.170072079 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.170619011 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.170624018 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.171236038 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.171240091 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.171845913 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.171863079 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.172755003 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.172768116 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.182634115 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.183234930 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.183300018 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.184029102 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.184045076 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.277189970 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.277870893 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.277896881 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.278495073 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.278501034 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.296957016 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.296983957 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.297045946 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.297056913 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.297130108 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.297175884 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.297702074 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.297713041 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.297723055 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.297728062 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.298877001 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.298970938 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.299024105 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.299088001 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.299092054 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.299101114 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.299103975 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.301575899 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.301666021 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.301717997 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.302809000 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.302824974 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.302835941 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.302840948 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.308800936 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.308871984 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.308984995 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.309959888 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.309993029 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.310091972 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.311372995 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.311456919 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.312304974 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.312326908 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.312407017 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.312865973 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.312880993 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.312988997 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.312999964 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.318311930 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.318321943 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.318360090 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.318406105 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.318440914 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.340452909 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.340454102 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.340524912 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.340562105 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.344852924 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.344883919 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.345041990 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.345252991 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.345266104 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.414742947 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.414776087 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.414834023 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.414868116 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.414940119 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.415236950 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.415244102 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.415291071 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.415440083 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.415482044 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.415551901 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.422220945 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.422245979 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:16.422339916 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.422708988 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:16.422718048 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.048870087 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.053186893 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.053220987 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.053769112 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.053774118 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.053881884 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.061211109 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.070411921 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.070440054 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.072640896 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.072653055 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.073972940 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.074006081 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.074623108 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.074630022 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.083112955 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.084392071 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.084415913 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.085231066 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.085236073 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.156311989 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.157360077 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.157377958 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.158184052 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.158188105 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.178626060 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.178690910 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.178764105 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.179449081 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.179464102 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.186222076 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.186255932 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.186491966 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.186722040 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.186731100 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.202505112 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.202584028 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.202687025 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.203573942 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.203591108 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.203612089 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.203619003 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.207806110 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.207834005 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.207933903 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.207956076 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.207972050 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.208015919 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.208260059 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.208287001 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.208384991 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.208589077 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.208600998 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.208621979 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.208631992 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.208641052 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.208645105 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.213937044 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.214041948 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.214096069 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.215007067 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.215034962 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.215117931 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.215795040 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.215806007 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.215820074 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.215823889 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.216068983 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.216080904 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.221640110 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.221668959 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.221862078 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.222592115 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.222603083 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.287540913 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.287720919 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.287796974 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.288054943 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.288073063 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.291620016 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.291668892 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.291809082 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.292145967 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.292166948 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.917196035 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.918346882 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.918361902 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.919372082 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.919377089 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.956959009 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.957807064 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.957834005 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.958625078 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.958637953 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.959759951 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.960480928 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.960560083 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.961656094 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.961671114 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.973165035 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.973825932 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.973848104 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:17.974580050 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:17.974601030 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.047379971 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.047838926 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.047883034 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.048538923 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.048551083 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.051987886 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.052067041 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.052145004 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.052268982 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.052289963 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.052303076 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.052309036 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.060415030 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.060440063 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.060535908 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.060676098 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.060688019 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.092767000 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.092847109 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.093027115 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.093221903 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.093250036 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.093269110 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.093274117 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.096035957 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.096064091 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.096182108 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.096383095 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.096395969 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.096729040 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.096790075 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.096925020 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.096987963 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.096987963 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.097027063 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.097057104 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.099170923 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.099184990 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.099256992 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.099405050 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.099416018 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.111905098 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.112123966 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.112200975 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.112319946 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.112338066 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.112380981 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.112390041 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.115237951 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.115252972 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.115329027 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.115497112 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.115509987 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.181902885 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.182080984 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.182173967 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.182389021 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.182389021 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.182430029 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.182456970 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.185158014 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.185213089 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.185363054 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.185497046 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.185514927 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.793272972 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.793939114 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.793971062 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.794410944 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.794419050 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.839273930 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.839931965 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.839962959 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.840396881 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.840424061 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.854476929 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.855107069 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.855135918 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.855559111 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.855567932 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.864265919 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.864751101 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.864779949 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.865283012 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.865293980 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.919222116 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.919820070 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.919847965 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.920552015 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.920558929 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.930092096 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.930495977 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.930697918 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.930754900 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.930783033 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.930799007 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.930807114 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.934509039 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.934555054 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.934628010 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.934864998 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.934881926 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.971889019 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.972053051 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.972112894 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.972121954 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.972188950 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.972531080 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.972541094 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.972569942 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.972574949 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.975892067 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.975923061 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.976063013 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.976185083 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.976196051 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.987478018 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.987541914 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.987662077 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.987791061 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.987803936 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.987838984 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.987847090 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.990654945 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.990698099 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:18.990993977 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.991131067 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:18.991147995 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.000631094 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.001616955 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.001677036 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.001745939 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.001782894 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.001801968 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.001822948 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.001832008 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.004828930 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.004870892 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.004949093 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.005163908 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.005181074 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.052555084 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.052622080 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.052943945 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.052944899 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.052979946 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.052995920 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.055922985 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.055963039 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.056153059 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.056449890 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.056462049 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.668943882 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.669477940 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.669507027 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.669956923 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.669962883 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.711169004 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.711765051 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.711776972 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.712182999 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.712197065 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.747745991 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.748198032 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.748213053 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.748694897 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.748698950 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.756912947 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.757309914 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.757319927 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.757827044 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.757832050 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.789618015 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.790218115 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.790225983 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.790673971 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.790678024 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.798048973 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.798119068 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.798259020 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.798326015 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.798333883 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.798353910 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.798358917 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.801083088 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.801124096 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.801234007 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.801425934 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.801436901 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.842391014 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.842468977 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.842715025 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.842715979 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.842788935 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.842809916 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.845711946 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.845757961 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.845828056 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.845997095 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.846009970 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.884442091 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.884530067 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.884726048 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.884756088 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.884776115 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.884787083 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.884793997 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.887706995 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.887732983 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.887813091 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.888061047 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.888071060 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.888961077 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.888995886 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.889045000 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.889075994 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.889111042 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.889242887 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.889260054 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.889277935 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.889283895 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.891727924 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.891767979 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.892091990 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.892294884 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.892314911 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.919805050 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.919939995 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.920078039 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.920161009 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.920177937 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.920188904 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.920196056 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.922914982 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.922945023 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:19.923104048 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.923270941 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:19.923283100 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.538474083 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.539109945 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.539124966 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.539596081 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.539602041 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.592991114 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.593518972 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.593540907 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.594006062 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.594012022 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.627504110 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.628035069 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.628056049 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.628530979 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.628536940 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.638113976 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.638607979 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.638622046 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.639138937 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.639143944 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.657578945 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.658092022 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.658107042 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.658549070 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.658556938 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.672535896 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.672691107 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.672795057 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.672852039 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.672852039 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.672873020 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.672882080 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.676266909 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.676294088 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.676434994 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.676992893 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.677015066 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.729541063 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.729609013 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.729667902 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.729685068 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.729753971 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.729890108 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.729954958 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.729973078 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.729984999 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.729990005 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.733045101 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.733088970 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.733269930 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.733463049 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.733478069 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.761771917 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.761861086 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.761926889 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.762103081 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.762113094 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.762125015 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.762130022 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.765000105 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.765039921 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.765176058 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.765286922 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.765300989 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.773938894 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.773963928 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.774019957 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.774122953 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.774122953 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.774318933 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.774318933 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.774341106 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.774359941 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.777265072 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.777276039 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.777343035 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.777510881 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.777522087 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.791555882 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.792155981 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.792222977 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.792320967 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.792331934 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.792344093 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.792349100 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.795593023 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.795608997 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.795844078 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.796032906 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:20.796046019 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:20.871536016 CEST	443	49803	142.250.185.196	192.168.2.4
Oct 24, 2024 00:54:20.871602058 CEST	443	49803	142.250.185.196	192.168.2.4
Oct 24, 2024 00:54:20.871717930 CEST	49803	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:54:21.427839994 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.429073095 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.429106951 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.430834055 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.430845022 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.470612049 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.471225977 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.471239090 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.471694946 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.471702099 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.501502991 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.502072096 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.502083063 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.502579927 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.502587080 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.527019978 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.527523041 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.527559996 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.528011084 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.528017998 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.545310020 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.545906067 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.545918941 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.546351910 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.546358109 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.562848091 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.562984943 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.563285112 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.563285112 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.563285112 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.566541910 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.566580057 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.566719055 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.566848993 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.566859007 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.604634047 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.605598927 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.605740070 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.605777979 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.605792046 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.605802059 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.605808020 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.608620882 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.608661890 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.608737946 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.608886003 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.608901978 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.634751081 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.634902000 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.634952068 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.635015965 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.635191917 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.635191917 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.635211945 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.635224104 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.638161898 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.638199091 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.638262987 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.638411045 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.638423920 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.663017035 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.663254023 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.663307905 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.663353920 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.663353920 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.663367987 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.663378000 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.666528940 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.666563034 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.666673899 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.666861057 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.666870117 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.683439970 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.683815956 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.683868885 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.684004068 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.684004068 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.684014082 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.684021950 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.686705112 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.686753988 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.686837912 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.687010050 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.687024117 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:21.877963066 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:21.877989054 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.489248037 CEST	49803	443	192.168.2.4	142.250.185.196
Oct 24, 2024 00:54:22.489274025 CEST	443	49803	142.250.185.196	192.168.2.4
Oct 24, 2024 00:54:22.533968925 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.534568071 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.534590006 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.535130024 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.535135984 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.535583973 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.536016941 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.536036968 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.536484003 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.536492109 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.536705971 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.537163019 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.537242889 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.537276030 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.537606001 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.537609100 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.537616968 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.537854910 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.537885904 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.538341999 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.538352966 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.538649082 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.538667917 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.539232016 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.539238930 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.808809996 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.808836937 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.808892012 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.808895111 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.808912992 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.808939934 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.808958054 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.808983088 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.808999062 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.809050083 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.809114933 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.809221029 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.809241056 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.809254885 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.809262991 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.809684038 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.809741020 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.809742928 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.809788942 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.809813023 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.809854031 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.810921907 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.810955048 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.810972929 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.810981035 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.812177896 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.812186956 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.812928915 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.812941074 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.812954903 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.812968016 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.814296961 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.814301014 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.814326048 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.814331055 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.817641973 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.817676067 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.817753077 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.818794966 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.818840027 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.818921089 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.819758892 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.819766998 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.819808006 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.820527077 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.820557117 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.820614100 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.820775032 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.820779085 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.820790052 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.820796013 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.821125031 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.821149111 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.821693897 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.821710110 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.821856022 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.821953058 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.821963072 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:22.822077990 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:22.822089911 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.571448088 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.571995020 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.572019100 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.572489023 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.572496891 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.579247952 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.579766989 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.579780102 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.580302000 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.580307961 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.584943056 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.585299015 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.585349083 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.585702896 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.585716963 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.595607996 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.595930099 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.596406937 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.596415043 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.596415043 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.596443892 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.596903086 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.596906900 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.597429991 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.597439051 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.705909014 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.706794977 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.706844091 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.706845999 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.706913948 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.706964970 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.706974983 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.706984043 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.706988096 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.710535049 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.710604906 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.710691929 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.710870981 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.710905075 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.713258982 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.713323116 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.713371038 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.713541985 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.713550091 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.713557005 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.713561058 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.716223955 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.716245890 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.716308117 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.716479063 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.716486931 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.720217943 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.720813036 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.720861912 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.720894098 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.720912933 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.720921040 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.720927000 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.723342896 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.723371983 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.723609924 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.723609924 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.723634005 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.734694004 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.735188961 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.735210896 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.735240936 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.735239983 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.735275984 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.735282898 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.735295057 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.735325098 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.735328913 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.735342979 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.735363007 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.735369921 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.735440969 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.735459089 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.735469103 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.735476017 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.738611937 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.738652945 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.738698959 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.738719940 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.738737106 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.738779068 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.738945961 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.738955975 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:23.738984108 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:23.739000082 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.450887918 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.451772928 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.451772928 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.451792955 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.451809883 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.474183083 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.475810051 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.475836039 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.476284027 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.476289988 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.490947962 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.491859913 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.491878986 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.492343903 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.492350101 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.549738884 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.550304890 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.550332069 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.550812006 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.550822973 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.587553978 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.587626934 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.587905884 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.587905884 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.587944031 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.587960005 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.590744972 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.590783119 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.591084003 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.591084003 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.591111898 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.612443924 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.612503052 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.612760067 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.613075972 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.613096952 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.613123894 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.613130093 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.615946054 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.615998030 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.616465092 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.616465092 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.616508961 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.634387970 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.634450912 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.634522915 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.634746075 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.634746075 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.634752035 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.634759903 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.637362957 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.637391090 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.637612104 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.637612104 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.637634993 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.703418016 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.703444004 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.703491926 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.703519106 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.703541040 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.703892946 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.703892946 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.703912973 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.703923941 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.706882954 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.706918955 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.707103014 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.707216978 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.707228899 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.739192963 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.740041971 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.740048885 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.740396976 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.740400076 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.878563881 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.878601074 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.878659010 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.878690958 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.878945112 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.878968000 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.878993034 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.879179955 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.879188061 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.881850004 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.881881952 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 00:54:24.882002115 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.882132053 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 00:54:24.882144928 CEST	443	49883	13.107.246.60	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 00:53:06.012967110 CEST	53	51419	1.1.1.1	192.168.2.4
Oct 24, 2024 00:53:06.013010979 CEST	53	62274	1.1.1.1	192.168.2.4
Oct 24, 2024 00:53:07.300949097 CEST	53	51073	1.1.1.1	192.168.2.4
Oct 24, 2024 00:53:08.395690918 CEST	59287	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:53:08.395828962 CEST	61613	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:53:08.509790897 CEST	53	59287	1.1.1.1	192.168.2.4
Oct 24, 2024 00:53:08.657615900 CEST	53	61613	1.1.1.1	192.168.2.4
Oct 24, 2024 00:53:09.925060034 CEST	58768	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:53:09.925226927 CEST	60490	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:53:09.932575941 CEST	53	60490	1.1.1.1	192.168.2.4
Oct 24, 2024 00:53:09.932986975 CEST	53	58768	1.1.1.1	192.168.2.4
Oct 24, 2024 00:53:11.135471106 CEST	54362	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:53:11.135617018 CEST	53508	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:53:11.385191917 CEST	53	53508	1.1.1.1	192.168.2.4
Oct 24, 2024 00:53:11.420870066 CEST	53	54362	1.1.1.1	192.168.2.4
Oct 24, 2024 00:53:21.661192894 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 00:53:24.260898113 CEST	53	53117	1.1.1.1	192.168.2.4
Oct 24, 2024 00:53:43.310595036 CEST	53	56620	1.1.1.1	192.168.2.4
Oct 24, 2024 00:54:05.374141932 CEST	53	65083	1.1.1.1	192.168.2.4
Oct 24, 2024 00:54:05.796874046 CEST	53	54722	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 00:53:08.657742977 CEST	192.168.2.4	1.1.1.1	c21f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 00:53:08.395690918 CEST	192.168.2.4	1.1.1.1	0xe394	Standard query (0)	jonsoo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:53:08.395828962 CEST	192.168.2.4	1.1.1.1	0x53d	Standard query (0)	jonsoo.com	65	IN (0x0001)	false
Oct 24, 2024 00:53:09.925060034 CEST	192.168.2.4	1.1.1.1	0x7541	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:53:09.925226927 CEST	192.168.2.4	1.1.1.1	0x6979	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:53:11.135471106 CEST	192.168.2.4	1.1.1.1	0x1881	Standard query (0)	jonsoo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:53:11.135617018 CEST	192.168.2.4	1.1.1.1	0x1d10	Standard query (0)	jonsoo.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 00:53:08.509790897 CEST	1.1.1.1	192.168.2.4	0xe394	No error (0)	jonsoo.com		209.17.116.160	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:53:09.932575941 CEST	1.1.1.1	192.168.2.4	0x6979	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:53:09.932986975 CEST	1.1.1.1	192.168.2.4	0x7541	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:53:11.420870066 CEST	1.1.1.1	192.168.2.4	0x1881	No error (0)	jonsoo.com		209.17.116.160	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:53:18.484364033 CEST	1.1.1.1	192.168.2.4	0xb74a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:53:18.484364033 CEST	1.1.1.1	192.168.2.4	0xb74a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:53:20.131903887 CEST	1.1.1.1	192.168.2.4	0xd585	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:53:20.131903887 CEST	1.1.1.1	192.168.2.4	0xd585	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:53:33.448703051 CEST	1.1.1.1	192.168.2.4	0x1cdf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:53:33.448703051 CEST	1.1.1.1	192.168.2.4	0x1cdf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:53:58.484247923 CEST	1.1.1.1	192.168.2.4	0x5372	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:53:58.484247923 CEST	1.1.1.1	192.168.2.4	0x5372	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:54:18.715205908 CEST	1.1.1.1	192.168.2.4	0x78b0	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:54:18.715205908 CEST	1.1.1.1	192.168.2.4	0x78b0	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

jonsoo.com

https:

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	209.17.116.160	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:53:10 UTC	653	OUT	GET / HTTP/1.1 Host: jonsoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:53:10 UTC	486	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 23 Oct 2024 22:53:10 GMT Content-Type: text/html Content-Length: 3729 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 17 Oct 2024 16:11:59 GMT ETag: "e91-624ae72387b89" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-10-23 22:53:10 UTC	3729	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 3c 68 74 6d 6c 3e 0d 3c 68 65 61 64 3e 0d 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 3e 0d 3c 74 69 74 6c 65 3e 55 6e 64 65 72 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0d 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 3c 21 2d 2d 0d 2e 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN""http://www.w3.org/TR/html4/loose.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><title>Under Construction</title><style type="text/css">....s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	209.17.116.160	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:53:10 UTC	574	OUT	GET /arrow.gif HTTP/1.1 Host: jonsoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jonsoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:53:11 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 23 Oct 2024 22:53:11 GMT Content-Type: image/gif Content-Length: 5605 Connection: close Last-Modified: Thu, 17 Oct 2024 16:11:59 GMT ETag: "15e5-624ae723be2a5" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-10-23 22:53:11 UTC	5605	IN	Data Raw: 47 49 46 38 39 61 69 00 68 00 e6 00 00 da e3 e9 ff ff fb 6b 74 7e cb d2 d9 e1 e4 e8 6a 7a 89 fa ff ff ff fe fd 6c 79 85 fa fa f9 ab b3 b9 70 7e 89 b0 b7 bc f5 fd ff d4 dc e3 98 a2 aa 70 79 81 93 9b a4 f8 fa fe b4 bc c4 85 8d 95 6e 78 82 7b 84 8b f7 ff ff 70 7a 84 71 78 7e fd f9 f5 f2 f5 fb f5 fa fe fc fc fc a4 ac b4 d3 d9 de ec f3 f9 c6 ce d4 73 80 8b 69 79 85 da df e3 b9 c2 c9 8c 94 9c e5 ea ef fd fa f7 66 74 82 76 83 8f 74 7d 86 fb fc ff fd fd fe 6d 7a 88 68 75 80 d0 d6 dc ff fc fe 6d 7c 89 f8 fc ff 66 72 7c fc fc fa fe fe fe 69 76 85 be c7 ce 6d 76 7f 72 7b 85 fa fb fd fe fd fb ea f0 f5 fd fa fc 6e 7c 85 ff fd f9 80 88 8f f7 f9 fb 6a 77 81 ac af b3 f2 fa fe a1 a8 ae fc ff fc df e9 f0 f5 f4 f3 ee fa ff fa fc fa 6f 7d 8d 6e 77 7e cc d7 df ff fb f8 65 6f Data Ascii: GIF89aihkt~jzlyp~pynx{pzqx~siyftvt}mzhum\|fr\|ivmvr{n\|jwo}nw~eo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:53:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 22:53:12 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=64380 Date: Wed, 23 Oct 2024 22:53:12 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	209.17.116.160	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:53:12 UTC	576	OUT	GET /favicon.ico HTTP/1.1 Host: jonsoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jonsoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:53:13 UTC	416	IN	HTTP/1.1 404 Not Found Server: openresty/1.25.3.1 Date: Wed, 23 Oct 2024 22:53:13 GMT Content-Type: text/html Content-Length: 575 Connection: close Last-Modified: Mon, 06 May 2024 19:16:49 GMT ETag: "23f-617cde9496008" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade
2024-10-23 22:53:13 UTC	575	IN	Data Raw: 3c 64 69 76 3e 0a 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 3c 62 3e 34 30 34 3a 20 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 62 3e 0a 20 20 20 20 20 20 20 20 3c 62 72 2f 3e 0a 20 20 20 20 20 20 20 20 54 68 69 73 20 65 72 72 6f 72 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 77 68 65 6e 20 74 68 65 72 65 20 77 61 73 20 6e 6f 20 77 65 62 20 70 61 67 65 20 77 69 74 68 20 74 68 65 20 6e 61 6d 65 20 79 6f 75 20 73 70 65 63 69 66 69 65 64 20 61 74 20 74 68 65 20 77 65 62 20 73 69 74 65 2e 0a 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 3c 62 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 20 73 75 67 67 65 73 74 69 6f 6e 73 3a 0a 20 20 20 20 20 20 20 20 3c 2f 62 3e 0a 20 20 20 20 3c Data Ascii: <div> <p> <b>404: Page not found</b> <br/> This error is generated when there was no web page with the name you specified at the web site. </p> <p> <b> Troubleshooting suggestions: </b> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:53:13 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 22:53:13 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=64348 Date: Wed, 23 Oct 2024 22:53:13 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 22:53:13 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	209.17.116.160	443	2148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:53:13 UTC	343	OUT	GET /arrow.gif HTTP/1.1 Host: jonsoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:53:13 UTC	464	IN	HTTP/1.1 200 OK Server: openresty/1.25.3.1 Date: Wed, 23 Oct 2024 22:53:13 GMT Content-Type: image/gif Content-Length: 5605 Connection: close Last-Modified: Thu, 17 Oct 2024 16:11:59 GMT ETag: "15e5-624ae723be2a5" Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: "1; mode=block" Referrer-Policy: no-referrer-when-downgrade X-Webcom-Cache-Status: BYPASS Accept-Ranges: bytes
2024-10-23 22:53:13 UTC	5605	IN	Data Raw: 47 49 46 38 39 61 69 00 68 00 e6 00 00 da e3 e9 ff ff fb 6b 74 7e cb d2 d9 e1 e4 e8 6a 7a 89 fa ff ff ff fe fd 6c 79 85 fa fa f9 ab b3 b9 70 7e 89 b0 b7 bc f5 fd ff d4 dc e3 98 a2 aa 70 79 81 93 9b a4 f8 fa fe b4 bc c4 85 8d 95 6e 78 82 7b 84 8b f7 ff ff 70 7a 84 71 78 7e fd f9 f5 f2 f5 fb f5 fa fe fc fc fc a4 ac b4 d3 d9 de ec f3 f9 c6 ce d4 73 80 8b 69 79 85 da df e3 b9 c2 c9 8c 94 9c e5 ea ef fd fa f7 66 74 82 76 83 8f 74 7d 86 fb fc ff fd fd fe 6d 7a 88 68 75 80 d0 d6 dc ff fc fe 6d 7c 89 f8 fc ff 66 72 7c fc fc fa fe fe fe 69 76 85 be c7 ce 6d 76 7f 72 7b 85 fa fb fd fe fd fb ea f0 f5 fd fa fc 6e 7c 85 ff fd f9 80 88 8f f7 f9 fb 6a 77 81 ac af b3 f2 fa fe a1 a8 ae fc ff fc df e9 f0 f5 f4 f3 ee fa ff fa fc fa 6f 7d 8d 6e 77 7e cc d7 df ff fb f8 65 6f Data Ascii: GIF89aihkt~jzlyp~pynx{pzqx~siyftvt}mzhum\|fr\|ivmvr{n\|jwo}nw~eo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:53:20 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lanYFkLuauWN9CF&MD=oBrSExvk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 22:53:20 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: ef011757-a578-49a2-ae8f-ee5de62ed531 MS-RequestId: 551adf3d-4b16-4deb-937f-aa7e2871f35d MS-CV: gnPwD39BpUS1YmhO.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 22:53:19 GMT Connection: close Content-Length: 24490
2024-10-23 22:53:20 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 22:53:20 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49750	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:53:58 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lanYFkLuauWN9CF&MD=oBrSExvk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 22:53:58 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: a14b1e57-a14c-4dd4-8b19-ff12942f1d68 MS-RequestId: de81cfc4-dde2-4566-88f1-e8b43c240d7d MS-CV: RMfidP0Mx06xYnAk.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 22:53:58 GMT Connection: close Content-Length: 30005
2024-10-23 22:53:58 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-23 22:53:58 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:53:59 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:53:59 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:53:59 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 04de7e24-801e-008f-0e20-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225359Z-16849878b78hz7zj8u0h2zng1400000006z000000000anbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:53:59 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 22:53:59 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 22:53:59 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 22:53:59 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 22:53:59 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 22:54:00 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 22:54:00 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 22:54:00 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 22:54:00 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 22:54:00 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:01 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:01 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225401Z-16849878b78z5q7jpbgf6e9mcw00000006w000000000pyr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:01 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:01 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:01 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225401Z-16849878b785f8wh85a0w3ennn00000006u000000000cr5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:01 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:01 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 626c88a9-b01e-003d-54f3-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225401Z-15b8d89586frzkk2umu6w8qnt80000000d8000000000ph10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:01 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:01 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:01 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5e9af5f8-e01e-0099-17f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225401Z-15b8d89586fxdh48qknu9dqk2g000000024g00000000bdzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:01 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:01 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:02 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:02 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225402Z-16849878b78hz7zj8u0h2zng1400000006yg00000000cpnf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:02 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:02 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 095283a4-c01e-0066-76f4-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225402Z-r197bdfb6b42sc4ddemybqpm140000000ne000000000dxgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:02 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5ab32e4-501e-00a3-0f09-25c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225402Z-r197bdfb6b4kq4j5t834fh90qn0000000a0g000000003ffu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:02 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:02 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: f2ab8105-101e-0065-6df4-244088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225402Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000b5000000000q866 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:02 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:02 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225402Z-16849878b78c5zx4gw8tcga1b400000006rg00000000g7m5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:02 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225403Z-15b8d89586fx2hlt035xdehq580000000dg000000000msa3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:03 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:03 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225403Z-16849878b787psctgubawhx7k800000006m000000000t5nc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:03 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:03 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 53592b39-c01e-0082-1ef3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225403Z-15b8d89586flzzks5bs37v2b9000000002hg00000000016r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:03 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:03 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225403Z-16849878b7862vlcc7m66axrs000000006x0000000009my7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:03 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:03 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 7d84539c-601e-00ab-7af2-2466f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225403Z-r197bdfb6b49q495mwyebb3r6s00000009tg00000000m3qg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:03 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:03 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:03 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 6a28da67-901e-0029-53f3-24274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225403Z-r197bdfb6b429k2s6br3k49qn4000000044g000000001fur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:03 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:04 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 89a40fd7-b01e-00ab-1aad-24dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225404Z-15b8d89586f6nn8zquf2vw6t54000000043g0000000005cb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:04 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:04 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225404Z-16849878b78s2lqfdex4tmpp7800000006ug00000000n7ur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:04 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225404Z-16849878b78lhh9t0fb3392enw00000006ng00000000un8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:04 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:04 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225404Z-16849878b78hz7zj8u0h2zng140000000700000000006aw7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:04 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:04 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:04 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: b478c109-d01e-00ad-3dad-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225404Z-15b8d89586fwzdd8urmg0p1ebs00000008c000000000ce8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:04 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:05 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225405Z-16849878b789m94j7902zfvfr000000006tg000000006vm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:05 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225405Z-16849878b78rjhv97f3nhawr7s00000006wg000000003p5r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:05 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225405Z-r197bdfb6b4kzncf21qcaynxz8000000011000000000ck3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:05 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:05 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8e7d8b57-101e-007a-1df4-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225405Z-r197bdfb6b4t7wszdvrfk02ah400000008d0000000009rth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:05 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:05 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225405Z-16849878b785g992cz2s9gk35c00000006y0000000005adg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:05 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:06 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:06 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: f88dc7cb-b01e-0001-23f2-2446e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225406Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009w000000000cpw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:06 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:06 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ff743265-301e-000c-1ff2-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225406Z-r197bdfb6b4r9fwfbdwymmgex800000000g000000000902r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:06 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:06 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225406Z-16849878b782h9tt5z2wa5rfxg00000006w0000000005bsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:06 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:06 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225406Z-16849878b786vsxz21496wc2qn00000006wg00000000mkng x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:06 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:06 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225406Z-16849878b78k8q5pxkgux3mbgg00000006vg000000008gyh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:06 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:06 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225407Z-16849878b785g992cz2s9gk35c00000006sg00000000vzhq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:07 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:07 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d2baa5f3-801e-0078-3ff3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225407Z-r197bdfb6b4kq4j5t834fh90qn00000009vg00000000mvtx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:07 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5167a131-c01e-0082-697a-25af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225407Z-15b8d89586fcvr6p5956n5d0rc00000003wg00000000de88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:07 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225407Z-16849878b7862vlcc7m66axrs000000006yg00000000466c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:07 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:07 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:07 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225407Z-16849878b78plcdqu15wsb886400000006sg00000000kfmr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:07 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:08 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f96c54c1-a01e-0098-5bf5-248556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225408Z-r197bdfb6b487xlkrahepdse50000000089000000000n62z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:09 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:08 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 6177d94c-d01e-0028-6bfc-247896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225408Z-r197bdfb6b4b582bwynewx7zgn0000000bgg00000000hn8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:08 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 221e1266-901e-0016-4cfc-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225408Z-r197bdfb6b49k6rsrbz098tg8000000003y000000000ppn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:09 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:08 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 3e897e27-701e-006f-014d-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225408Z-16849878b78c5zx4gw8tcga1b400000006tg000000005tr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:09 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:08 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:08 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f9fc18b-f01e-0096-2cf2-2410ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225408Z-r197bdfb6b46gt25anfa5gg2fw000000027g00000000vges x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:09 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:09 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:09 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225409Z-16849878b786vsxz21496wc2qn00000006wg00000000mkva x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:09 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:09 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:09 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: a706a42d-501e-008c-4ef2-24cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225409Z-r197bdfb6b4vlqfn9hfre6k1s80000000bs00000000023t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:09 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:09 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:09 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225409Z-16849878b788tnsxzb2smucwdc00000006y0000000005z6a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:09 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:09 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:09 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225409Z-15b8d89586ff5l62quxsfe8ugg0000000d5g000000004gp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:09 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:09 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:09 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225409Z-16849878b78q4pnrt955f8nkx800000006sg00000000aauw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:09 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:10 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:10 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f6bed088-301e-0000-1a9a-24eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225410Z-15b8d89586fnsf5zm1ryrxu0bc000000029000000000m000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:10 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:10 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225410Z-16849878b78dkr6tqerbnpg1zc00000006ug00000000m5hg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:10 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225410Z-16849878b78c5zx4gw8tcga1b400000006ng00000000uurt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:10 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:10 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 7082da1f-601e-003d-073e-226f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225410Z-16849878b789m94j7902zfvfr000000006ng00000000uh7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:10 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:10 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225410Z-16849878b78s2lqfdex4tmpp7800000006vg00000000g6bg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:11 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225411Z-16849878b7842t5ke0k7mzbt3c00000006sg000000003qgu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:11 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1d9ab00d-a01e-0002-3af4-245074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225411Z-r197bdfb6b487xlkrahepdse5000000008bg00000000d0hm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:11 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:11 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 3892b43a-301e-0051-71f4-2438bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225411Z-15b8d89586f4zwgbz365q03b0c0000000dkg00000000eg8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:11 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 13fbacc8-201e-0003-23f4-24f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225411Z-r197bdfb6b4kq4j5t834fh90qn00000009v000000000mc0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:11 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 09cb71da-201e-0033-6911-22b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225411Z-16849878b78lhh9t0fb3392enw00000006u0000000004fct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:12 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:12 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 04ff5eee-d01e-0049-7af2-24e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225412Z-15b8d89586f42m673h1quuee4s000000028000000000b2rg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:12 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:12 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:12 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 79657049-a01e-0032-1dac-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225412Z-15b8d89586f6nn8zquf2vw6t5400000003yg00000000fta5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:12 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:12 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:12 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 217788b5-401e-0016-11a2-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225412Z-16849878b78fmrkt2ukpvh9wh400000006vg000000007exh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:12 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:12 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:12 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225412Z-16849878b784cpcc2dr9ch74ng00000006x000000000k8w0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:12 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:12 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6a9fe61e-e01e-001f-0a16-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225412Z-r197bdfb6b4lkrtc7na2dkay2800000002ag000000001dw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:12 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:13 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:13 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225413Z-16849878b78dghrpt8v731n7r400000006pg00000000q1k1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:13 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:13 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:13 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 965686a0-401e-008c-4bf2-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225413Z-15b8d89586fdmfsg1u7xrpfws000000002fg000000005br3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:13 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:13 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:13 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 43134ec5-e01e-003c-4115-25c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225413Z-r197bdfb6b4kq4j5t834fh90qn00000009ug00000000pwqd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:13 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:13 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:13 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b12d28ce-501e-000a-62f4-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225413Z-15b8d89586fst84k5f3z220tec0000000de000000000p0df x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:13 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:13 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:13 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f2361012-b01e-003e-18e4-218e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225413Z-16849878b788tnsxzb2smucwdc00000006wg00000000bkm4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:13 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:14 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225414Z-16849878b78lhh9t0fb3392enw00000006ng00000000up1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:14 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:14 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225414Z-r197bdfb6b4rkc6mhwyt3e61pc00000000w0000000003tnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:14 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:14 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:14 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225414Z-16849878b784cpcc2dr9ch74ng00000006x000000000k918 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:14 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:14 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 043e3b4b-d01e-0049-50ae-24e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225414Z-15b8d89586fcvr6p5956n5d0rc00000003tg00000000sk0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:14 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:14 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225414Z-16849878b785f8wh85a0w3ennn00000006t000000000k2fm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:14 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:15 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d2bab0c5-801e-0078-24f3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225415Z-r197bdfb6b49q495mwyebb3r6s00000009t000000000npmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:15 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 497f5b85-801e-00a3-28f2-247cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225415Z-r197bdfb6b4h2vctng0a0nubg80000000a0000000000bb5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:15 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:15 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 41e4118e-001e-0017-175a-230c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225415Z-r197bdfb6b4kzncf21qcaynxz800000000xg00000000uhgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:15 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:15 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225415Z-16849878b78jfqwd1dsrhqg3aw00000006wg00000000n9ne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:15 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:15 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225415Z-16849878b78dkr6tqerbnpg1zc00000006x000000000b65v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:15 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:16 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:16 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 26247a46-101e-000b-3298-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225416Z-15b8d89586f6nn8zquf2vw6t54000000041g000000005vd8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:16 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:16 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:16 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: fc120a29-401e-000a-4ff2-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225416Z-15b8d89586fst84k5f3z220tec0000000dd000000000kwaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:16 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:16 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:16 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225416Z-16849878b785g992cz2s9gk35c00000006y0000000005b1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:16 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:16 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:16 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8e096af2-401e-0015-41f3-240e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225416Z-r197bdfb6b46gt25anfa5gg2fw000000027g00000000vgr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:16 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:16 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:16 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: aaf6fada-701e-0053-683a-223a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225416Z-16849878b78q4pnrt955f8nkx800000006rg00000000egd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:16 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:17 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:17 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:17 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c29108f7-201e-0000-1ff5-24a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225417Z-r197bdfb6b46gt25anfa5gg2fw00000002dg000000004ec4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:17 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:17 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:17 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225417Z-16849878b78q4pnrt955f8nkx800000006q000000000mu28 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:17 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:17 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:17 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:17 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225417Z-16849878b787psctgubawhx7k800000006pg00000000dxvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:17 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:17 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:17 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:17 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ef146494-c01e-00a1-274d-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225417Z-16849878b787c9z7hb8u9yysp000000006wg00000000mxqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:17 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:17 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:17 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 33ffbe2f-201e-0085-3800-2534e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225417Z-15b8d89586f989rks44whx5v7s0000000d4g00000000ucvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:17 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:17 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:17 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225417Z-16849878b78p4hmjy4vha5ddqw00000006tg000000007f7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:18 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:17 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:17 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225417Z-16849878b782h9tt5z2wa5rfxg00000006qg00000000x46e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:18 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:17 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:17 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 14811fc9-901e-0016-298e-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225417Z-16849878b78jfqwd1dsrhqg3aw000000071g000000000u86 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:18 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:17 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:17 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 67684ae8-901e-0016-58ee-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225417Z-16849878b78dghrpt8v731n7r400000006mg00000000zsh3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:18 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:18 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:18 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 082c7638-801e-0067-65f2-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225418Z-15b8d89586flspj6y6m5fk442w00000003yg000000003drz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:18 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:18 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:18 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 18e0c3bd-301e-001f-11f3-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225418Z-r197bdfb6b4ld6jc5asqwvvz0w00000000wg000000003p19 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:18 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:18 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:18 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225418Z-16849878b787psctgubawhx7k800000006p000000000hgdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:18 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:18 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:18 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225418Z-16849878b786wvrz321uz1cknn00000006ug00000000pbvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:18 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:18 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:18 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225418Z-16849878b787sbpl0sv29sm89s00000007000000000065d0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:18 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:18 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:18 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225418Z-15b8d89586fmhkw4gksnr1w3ds0000000dk000000000735c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:19 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:19 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:19 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225419Z-15b8d89586flspj6y6m5fk442w00000003w000000000c3a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:19 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:19 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:19 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225419Z-16849878b784cpcc2dr9ch74ng00000006y000000000dfx2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:19 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:19 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:19 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: f9504115-401e-0083-703b-22075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225419Z-16849878b7862vlcc7m66axrs000000006x0000000009nzs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:19 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 8e7afceb-101e-007a-50f3-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225419Z-r197bdfb6b49q495mwyebb3r6s00000009x00000000080t2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:19 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:19 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: cdab5f2f-001e-00ad-361c-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225419Z-15b8d89586fx2hlt035xdehq580000000dfg00000000nfc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:20 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:20 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 95bc9e17-201e-0051-77f2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225420Z-15b8d89586frzkk2umu6w8qnt80000000d9000000000kxwu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:54:20 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:20 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:20 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 81a8d0db-401e-0047-0515-258597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225420Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000b90000000006be1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:20 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:20 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:20 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 332ff9ef-a01e-003d-42f3-2498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225420Z-r197bdfb6b4h2vctng0a0nubg80000000a10000000007nyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:20 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:20 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:20 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225420Z-16849878b78z5q7jpbgf6e9mcw00000006ug00000000v7vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:20 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:20 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:20 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225420Z-16849878b7842t5ke0k7mzbt3c00000006t0000000001ayr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:20 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:21 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:21 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:21 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225421Z-16849878b7842t5ke0k7mzbt3c00000006p000000000kegf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:21 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:21 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:21 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a7868e79-001e-0049-77f2-245bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225421Z-r197bdfb6b4rkc6mhwyt3e61pc00000000x00000000016uc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:21 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:21 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e8b9c1e5-a01e-001e-79f2-2449ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225421Z-15b8d89586fnsf5zm1ryrxu0bc00000002b000000000d26b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:21 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:21 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 21a6354f-801e-00a0-33ae-242196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225421Z-15b8d89586f8nxpt5xx0pk7du8000000041g000000007b1m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:21 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:21 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:21 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225421Z-16849878b782558xg5kpzay6es00000006tg00000000feap x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:22 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:22 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: dfdc7019-701e-000d-68f4-246de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225422Z-15b8d89586fvk4kmwqg9fgbkn800000002bg00000000kr4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:22 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:22 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 77e1448d-001e-0034-40f3-24dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225422Z-15b8d89586fzhrwgk23ex2bvhw00000000u000000000pav9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:22 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225422Z-16849878b78mhkkf6kbvry07q000000006s000000000d21x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:22 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 62a19e75-a01e-0032-1bf3-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225422Z-r197bdfb6b429k2s6br3k49qn400000003yg00000000h8vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:22 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:22 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 74c47345-e01e-00aa-3afd-24ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225422Z-15b8d89586fxdh48qknu9dqk2g000000024g00000000bewb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:22 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:23 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:23 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225423Z-16849878b78hz7zj8u0h2zng1400000006y000000000dz2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:23 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:23 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:23 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f9013c52-001e-0079-5ef2-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225423Z-15b8d89586fzhrwgk23ex2bvhw00000000sg00000000uayr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:23 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:23 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:23 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225423Z-16849878b7842t5ke0k7mzbt3c00000006hg000000010284 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:23 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:23 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:23 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 4481152a-601e-0001-4b55-22faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225423Z-16849878b787psctgubawhx7k800000006m000000000t73e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:23 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:23 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:23 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c82cfbdf-e01e-00aa-7097-25ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225423Z-16849878b786wvrz321uz1cknn00000006t000000000v1qb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:23 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:24 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:24 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225424Z-16849878b78rjhv97f3nhawr7s00000006v0000000008prz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:24 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:24 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:24 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 4fea8089-201e-0071-08f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225424Z-r197bdfb6b429k2s6br3k49qn4000000042g000000007zvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:24 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:24 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:24 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225424Z-16849878b786vsxz21496wc2qn00000006x000000000kbwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:24 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:24 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:24 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 264b7e39-001e-0028-804e-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225424Z-16849878b78dkr6tqerbnpg1zc00000006s000000000ycq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:24 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:24 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:24 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:24 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225424Z-16849878b787sbpl0sv29sm89s00000006x000000000hukk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:24 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:25 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:25 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a1fd626a-d01e-0017-5dfc-24b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225425Z-15b8d89586fst84k5f3z220tec0000000dmg00000000328u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:25 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:25 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:25 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225425Z-16849878b782h9tt5z2wa5rfxg00000006u000000000dbyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:25 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:25 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:25 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 03ef3c5b-d01e-007a-4ff2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225425Z-15b8d89586fwzdd8urmg0p1ebs00000008d0000000008pfp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:25 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:25 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:25 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 06d7a471-401e-0029-1427-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225425Z-16849878b78bkvbz1ry47zvsas00000006sg00000000wcdr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:25 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:54:25 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:54:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:54:25 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b7fa3ccf-501e-005b-325d-23d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T225425Z-r197bdfb6b4b582bwynewx7zgn0000000bf000000000pr9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:54:25 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 600, Parent PID: 772

General

Target ID:	0
Start time:	18:53:00
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2148, Parent PID: 600

General

Target ID:	2
Start time:	18:53:03
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2176,i,7863491789504898486,5352915076332387917,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6316, Parent PID: 772

General

Target ID:	3
Start time:	18:53:07
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jonsoo.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: jonsoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /arrow.gif HTTP/1.1Host: jonsoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jonsoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: jonsoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jonsoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /arrow.gif HTTP/1.1Host: jonsoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lanYFkLuauWN9CF&MD=oBrSExvk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lanYFkLuauWN9CF&MD=oBrSExvk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: jonsoo.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://jonsoo.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 40

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Chrome Cache Entry: 43

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 600, Parent PID: 772

General

Chronological Activities

Analysis Process: chrome.exePID: 2148, Parent PID: 600

General

Chronological Activities

Analysis Process: chrome.exePID: 6316, Parent PID: 772

General

Chronological Activities

Disassembly

Windows Analysis Report
https://jonsoo.com/