Edit tour

Windows Analysis Report
https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4

Overview

General Information

Sample URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp4
Analysis ID:	1540815
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,919278412284363896,16631355805893263955,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIy" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIy

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49818 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIy HTTP/1.1Host: email.sg.on24event.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: email.sg.on24event.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YyD711KFBPhu16M&MD=rczcpRE4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YyD711KFBPhu16M&MD=rczcpRE4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: email.sg.on24event.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 24 Oct 2024 05:58:15 GMTContent-Type: text/htmlContent-Length: 564Connection: close

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49818 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/4@4/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,919278412284363896,16631355805893263955,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIy"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,919278412284363896,16631355805893263955,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
r-email.sg.on24event.com	199.83.44.68	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
email.sg.on24event.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://email.sg.on24event.com/favicon.ico	false		unknown
https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIy	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
199.83.44.68	r-email.sg.on24event.com	United States	18742	ON24-SACUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540815
Start date and time:	2024-10-24 07:57:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIy
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/4@4/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.185.174, 74.125.206.84, 34.104.35.123, 199.232.210.172, 13.85.23.206, 192.229.221.95, 172.217.16.195
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2B Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "You have clicked on an invalid link. Please make sure that you have typed the link correctly. If are copying this link from a mail reader please ensure that you have copied all the lines in the link.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2B Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 40

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	564
Entropy (8bit):	4.72971822420855
Encrypted:	false
SSDEEP:	12:TjeRHdHiHZdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH988DTPTPTPTPTPTc
MD5:	8E325DC2FEA7C8900FC6C4B8C6C394FE
SHA1:	1B3291D4EEA179C84145B2814CB53E6A506EC201
SHA-256:	0B52C5338AF355699530A47683420E48C7344E779D3E815FF9943CBFDC153CF2
SHA-512:	084C608F1F860FB08EF03B155658EA9988B3628D3C0F0E9561FDFF930E5912004CDDBCC43B1FA90C21FE7F5A481AC47C64B8CAA066C2BDF3CF533E152BF96C14
Malicious:	false
Reputation:	low
URL:	https://email.sg.on24event.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body bgcolor="white">..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	4.477778146874743
Encrypted:	false
SSDEEP:	6:qzxUsjMR1X96b2+Ubghxc8le3rn9MGzMd4aa6++Oix9qD:kxBMR1knUkhGXpPoa6++3xMD
MD5:	F0C66914A58FC74FC98A7C9BB4C288F2
SHA1:	3E0E43F567138623CABFF91C14100D144AC56949
SHA-256:	54E173BE753D03B2C163CEBBEE02BE7F4BDC1D6663154D4D60A3833F7BA3436B
SHA-512:	7AEDAEBA112D43E2B2FF845355199A11A141D637C0306155BE2356AE297DF118D2C0D2768D44C35A1D89841DB428E95686E29E9D15DEADF4233F3713893514BF
Malicious:	false
Reputation:	low
URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIy
Preview:	<html><head><title>Wrong Link</title></head><body><h1>Wrong Link</h1><p>You have clicked on an invalid link. Please make sure that you have typed the link correctly. If are copying this link from a mail reader please ensure that you have copied all the lines in the link.</p></body></html>

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 07:58:11.193531990 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 07:58:13.483803034 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:13.483851910 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:13.483936071 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:13.484235048 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:13.484288931 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:13.484464884 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:13.484885931 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:13.484896898 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:13.485188007 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:13.485198975 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.333542109 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.334067106 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:14.334095001 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.335557938 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.335634947 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:14.336850882 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:14.336987019 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.337097883 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:14.337105036 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.337117910 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.337321997 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:14.337352037 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.338814974 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.338879108 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:14.339221954 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:14.339293003 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.382009983 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:14.382010937 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:14.382042885 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:14.429543972 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:15.002109051 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:15.025604010 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:15.025660038 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:15.026293039 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:15.026309013 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:15.094607115 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:15.139333010 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:15.313060045 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:15.343667030 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:15.343801975 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:15.344214916 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 07:58:15.344261885 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 07:58:15.671004057 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:58:15.671057940 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 24, 2024 07:58:15.671124935 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:58:15.671427011 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:58:15.671441078 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 24, 2024 07:58:15.859672070 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:15.859719038 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:15.859787941 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:15.861332893 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:15.861342907 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:16.529350042 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 24, 2024 07:58:16.529618025 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:58:16.529659033 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 24, 2024 07:58:16.531064987 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 24, 2024 07:58:16.531131983 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:58:16.532565117 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:58:16.532639027 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 24, 2024 07:58:16.583209991 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:58:16.583240032 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 24, 2024 07:58:16.630064964 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:58:16.718579054 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:16.718652010 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:16.722501040 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:16.722513914 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:16.722906113 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:16.767287970 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:16.807339907 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:17.011048079 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:17.011127949 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:17.011172056 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:17.011492968 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:17.011513948 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:17.011527061 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:17.011533976 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:17.058235884 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:17.058273077 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:17.058324099 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:17.058895111 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:17.058906078 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:17.900290966 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:17.901715040 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:17.901715040 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:17.901748896 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:17.902097940 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:17.903348923 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:17.951334000 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:18.146948099 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:18.147034883 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:18.147994995 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:18.147994995 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:18.148897886 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 07:58:18.148922920 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 07:58:24.064363956 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:24.064428091 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:24.064501047 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:24.065543890 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:24.065563917 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:24.839163065 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:24.839401007 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:24.841761112 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:24.841792107 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:24.842142105 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:24.882618904 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:25.693367958 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:25.735362053 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:25.947321892 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:25.947356939 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:25.947365999 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:25.947382927 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:25.947422028 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:25.947431087 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:25.947468042 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:25.947489023 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:25.947510004 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:25.947753906 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:25.947808981 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:25.947817087 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:25.948460102 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:25.949062109 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:26.529182911 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 24, 2024 07:58:26.529269934 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 24, 2024 07:58:26.529341936 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:58:26.578845978 CEST	49743	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:58:26.578871012 CEST	443	49743	172.202.163.200	192.168.2.4
Oct 24, 2024 07:58:27.725814104 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:58:27.725856066 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 24, 2024 07:58:28.733134985 CEST	80	49723	217.20.57.18	192.168.2.4
Oct 24, 2024 07:58:28.733261108 CEST	49723	80	192.168.2.4	217.20.57.18
Oct 24, 2024 07:58:28.733325958 CEST	49723	80	192.168.2.4	217.20.57.18
Oct 24, 2024 07:58:28.738671064 CEST	80	49723	217.20.57.18	192.168.2.4
Oct 24, 2024 07:58:43.432914019 CEST	80	49724	217.20.57.18	192.168.2.4
Oct 24, 2024 07:58:43.433038950 CEST	49724	80	192.168.2.4	217.20.57.18
Oct 24, 2024 07:58:43.449970007 CEST	49724	80	192.168.2.4	217.20.57.18
Oct 24, 2024 07:58:43.455378056 CEST	80	49724	217.20.57.18	192.168.2.4
Oct 24, 2024 07:59:02.901267052 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:02.901319981 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:02.901422977 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:02.901746035 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:02.901763916 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.682935953 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.683054924 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.686255932 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.686285019 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.686697006 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.694258928 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.739334106 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.950119019 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.950150967 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.950170040 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.950227976 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.950257063 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.950273037 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.950311899 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.951241016 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.951289892 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.951334000 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.951343060 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.951355934 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.952100992 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.952156067 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.954746962 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.954765081 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:03.954787970 CEST	49749	443	192.168.2.4	172.202.163.200
Oct 24, 2024 07:59:03.954794884 CEST	443	49749	172.202.163.200	192.168.2.4
Oct 24, 2024 07:59:06.061101913 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:06.061202049 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:06.061331987 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:06.061623096 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:06.061655998 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:06.829737902 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:06.830140114 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:06.831770897 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:06.831787109 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:06.832247019 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:06.848860979 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:06.895344019 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.070163965 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.070225000 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.070269108 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.070311069 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.070353031 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.070368052 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.070449114 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.101541042 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.101613998 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.101655006 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.101694107 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.101716042 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.101914883 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.187690973 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.187753916 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.187860012 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.187860012 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.187886000 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.188245058 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.218506098 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.218539000 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.218893051 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.218913078 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.219459057 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.221225023 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.221246958 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.221357107 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.221370935 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.223462105 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.304415941 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.304439068 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.304649115 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.304666996 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.304846048 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.305031061 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.305047989 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.305143118 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.305155039 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.305814981 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.335160971 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.335180044 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.335387945 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.335401058 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.335809946 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.336097956 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.336126089 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.336241961 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.336253881 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.336415052 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.337763071 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.337784052 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.337914944 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.337925911 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.338047981 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.338773966 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.338790894 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.338902950 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.338912964 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.339283943 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.340648890 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.340675116 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.340759039 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.340759993 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.340770006 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.340928078 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.382236958 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.382261992 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.382356882 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.382356882 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.382378101 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.382605076 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.421818018 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.421905041 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.421917915 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.421968937 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.421968937 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.422008038 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.422029018 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.466356993 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.466420889 CEST	49751	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.466468096 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.466514111 CEST	443	49751	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.466917992 CEST	49751	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.467025042 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.467673063 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.467725039 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.468200922 CEST	49751	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.468231916 CEST	443	49751	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.468735933 CEST	49753	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.468826056 CEST	443	49753	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.469425917 CEST	49753	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.469990015 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.469995975 CEST	49753	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.470032930 CEST	443	49753	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.470033884 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.470164061 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.470402956 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.470417976 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.470849037 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.470870972 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:07.472573996 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.473265886 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:07.473285913 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.231374025 CEST	443	49753	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.231877089 CEST	49753	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.231935024 CEST	443	49753	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.232105017 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.232322931 CEST	49753	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.232336044 CEST	443	49753	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.232613087 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.232695103 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.232976913 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.232990980 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.233011961 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.233263016 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.233293056 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.233688116 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.233697891 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.237628937 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.237915039 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.237931013 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.238328934 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.238341093 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.513705015 CEST	443	49753	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.513739109 CEST	443	49753	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.513806105 CEST	49753	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.513820887 CEST	443	49753	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.513838053 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.513860941 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.513896942 CEST	49753	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.513945103 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.513974905 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.514002085 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.514015913 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.514048100 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.514058113 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.514117002 CEST	49753	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.514152050 CEST	443	49753	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.514174938 CEST	49753	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.514183044 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.514195919 CEST	443	49753	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.514209986 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.514216900 CEST	49755	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.514228106 CEST	443	49755	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.514236927 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.514286041 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.515187025 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.515212059 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.515238047 CEST	49754	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.515248060 CEST	443	49754	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.515311956 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.515331984 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.515352011 CEST	49752	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.515357971 CEST	443	49752	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.516128063 CEST	443	49751	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.516555071 CEST	49751	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.516582966 CEST	443	49751	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.517045975 CEST	49751	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.517050982 CEST	443	49751	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.518471003 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.518511057 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.518573046 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.518608093 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.518613100 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.518645048 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.518778086 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.518790007 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.519004107 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.519015074 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.519563913 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.519581079 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.519649029 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.519793987 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.519803047 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.520191908 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.520206928 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.520304918 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.520437956 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.520447969 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.663425922 CEST	443	49751	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.663451910 CEST	443	49751	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.663518906 CEST	443	49751	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.663533926 CEST	49751	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.663562059 CEST	49751	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.663733959 CEST	49751	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.663758993 CEST	443	49751	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.663769960 CEST	49751	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.663777113 CEST	443	49751	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.666415930 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.666532040 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:08.666624069 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.666817904 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:08.666856050 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.282215118 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.282234907 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.282675028 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.282705069 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.282984972 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.282991886 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.283245087 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.283251047 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.283457041 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.283463001 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.289613008 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.289992094 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.290011883 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.290014029 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.290405989 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.290405989 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.290420055 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.290436983 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.290874958 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.290884018 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.419888020 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.420039892 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.420110941 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.420115948 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.420192957 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.420201063 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.420201063 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.420219898 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.420223951 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.420290947 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.420418024 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.420418024 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.420422077 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.420428991 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.423106909 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.423156977 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.423238993 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.423300028 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.423351049 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.423422098 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.423468113 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.423485994 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.423625946 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.423650026 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.429891109 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.430016994 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.430087090 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.430270910 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.430270910 CEST	49757	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.430285931 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.430295944 CEST	443	49757	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.431195974 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.431277037 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.431360006 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.431572914 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.431572914 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.431579113 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.431585073 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.431726933 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.432252884 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.432285070 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.432730913 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.432745934 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.433671951 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.433692932 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.433904886 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.434009075 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.434021950 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.434035063 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.434088945 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.434156895 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.434241056 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.434268951 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.571088076 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.571162939 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.571372032 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.576716900 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.576716900 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.576755047 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.576771975 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.580698013 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.580748081 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:09.580979109 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.581372976 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:09.581396103 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.198156118 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.198982000 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.199080944 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.199112892 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.199944973 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.199955940 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.200509071 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.200591087 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.200632095 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.201149940 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.201174974 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.201631069 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.201675892 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.202198982 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.202219963 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.204613924 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.205259085 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.205290079 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.206116915 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.206123114 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.336947918 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.337280035 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.337357998 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.337368965 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.337498903 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.337600946 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.337754965 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.337774992 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.337798119 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.337802887 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.338861942 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.338990927 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.339180946 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.339293957 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.340883017 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.340903044 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.341495037 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.341505051 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.341818094 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.341852903 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.343354940 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.343375921 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.346005917 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.346086979 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.346209049 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.346458912 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.346477985 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.352672100 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.352716923 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.352874994 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.353187084 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.353202105 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.355736017 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.355776072 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.355878115 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.356928110 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.356964111 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.357019901 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.357170105 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.357182980 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.358565092 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.358650923 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.358747959 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.358767033 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.358782053 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.358922005 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.358957052 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.480748892 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.480817080 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.480890989 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.481062889 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.481086016 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.481100082 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.481110096 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.483685970 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.483730078 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:10.483803034 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.483973026 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:10.483989000 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.110486031 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.111442089 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.111470938 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.113270998 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.113289118 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.116408110 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.117019892 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.117055893 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.118268013 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.118273973 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.120764017 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.121438026 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.121479988 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.122772932 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.122783899 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.128096104 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.128736019 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.128758907 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.129410982 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.129419088 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.242408991 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.242927074 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.242952108 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.243707895 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.243720055 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.248096943 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.248294115 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.248564005 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.248980999 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.249007940 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.249022007 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.249030113 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.255208015 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.255403996 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.255487919 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.256679058 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.256700993 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.258352995 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.258433104 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.258521080 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.266720057 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.266753912 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.266769886 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.266778946 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.267808914 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.267971992 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.268023968 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.268234968 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.268251896 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.268440008 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.268445969 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.301254988 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.301310062 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.301379919 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.302630901 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.302685976 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.302870035 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.303708076 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.303723097 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.304553032 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.304569006 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.306399107 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.306432009 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.306519985 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.306680918 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.306698084 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.308134079 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.308156967 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.308235884 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.309328079 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.309341908 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.381604910 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.381681919 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.381824017 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.382720947 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.382740021 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.382750988 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.382757902 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.393225908 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.393280029 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:11.393347979 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.393889904 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:11.393908024 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.061573982 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.062079906 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.062113047 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.062527895 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.062535048 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.063532114 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.063836098 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.063857079 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.064162970 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.064169884 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.066556931 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.066751957 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.066894054 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.066905975 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.067095041 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.067126036 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.067435026 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.067440033 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.067468882 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.067477942 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.141504049 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.141968966 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.142004967 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.142422915 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.142435074 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.199080944 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.199174881 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.199306965 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.199363947 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.199363947 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.199384928 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.199399948 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.200921059 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.201051950 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.201103926 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.201179028 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.201198101 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.201209068 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.201214075 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.202539921 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.202584982 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.202649117 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.202789068 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.202804089 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.203679085 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.203723907 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.203790903 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.203993082 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.204009056 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.204427004 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.204477072 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.204498053 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.204540968 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.204593897 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.204631090 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.204710007 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.204710007 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.204729080 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.204746962 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.204849958 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.204859972 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.204881907 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.204885960 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.207355976 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.207381010 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.207495928 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.207580090 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.207601070 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.207618952 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.207634926 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.207654953 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.207720041 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.207730055 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.277848959 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.277977943 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.278033018 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.278270960 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.278295994 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.278310061 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.278317928 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.282215118 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.282257080 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.282418966 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.282716990 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.282737017 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.954195976 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.954767942 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.954802036 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.955391884 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.955398083 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.968033075 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.968501091 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.968539953 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.969144106 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.969150066 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.971973896 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.972532034 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.972548962 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.973397970 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:12.973402977 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:12.977391958 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.005342960 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.005382061 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.006177902 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.006185055 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.037738085 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.038435936 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.038454056 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.039166927 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.039172888 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.091216087 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.091295958 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.091356039 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.093220949 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.093240023 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.093342066 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.093348980 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.097749949 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.097785950 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.097836971 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.098275900 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.098299980 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.105758905 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.105915070 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.105969906 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.106147051 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.106148005 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.106178045 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.106197119 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.110219002 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.110299110 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.110367060 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.111277103 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.111299992 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.111366987 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.111435890 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.111454010 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.111478090 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.111485004 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.113619089 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.113651037 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.113852978 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.114305973 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.114324093 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.114500046 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.114514112 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.141902924 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.142159939 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.142215967 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.142493010 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.142498016 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.150890112 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.150929928 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.150985956 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.151694059 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.151710987 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.175646067 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.175707102 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.175760031 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.176028013 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.176038027 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.176151991 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.176156044 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.180973053 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.181014061 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.181081057 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.181876898 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.181891918 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.865930080 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.866398096 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.866434097 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.866794109 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.866801977 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.871165037 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.871561050 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.871582031 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.871963024 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.871968031 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.881583929 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.881906033 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.881932020 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.882196903 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.882205009 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.909893036 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.910182953 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.910211086 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.910501003 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.910506964 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.933518887 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.933841944 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.933873892 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:13.934143066 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:13.934149981 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.004565954 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.004622936 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.004673004 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.004806995 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.004828930 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.004842043 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.004849911 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.007246017 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.007289886 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.007363081 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.007482052 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.007503986 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.011280060 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.011359930 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.011451006 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.011483908 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.011497974 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.011554003 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.011559010 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.013377905 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.013426065 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.013613939 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.013745070 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.013762951 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.018567085 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.018721104 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.018771887 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.018805981 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.018806934 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.018824100 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.018832922 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.020509005 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.020544052 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.020677090 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.020812988 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.020828009 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.047264099 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.047424078 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.047518969 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.047595978 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.047610998 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.047622919 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.047629118 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.049947977 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.050003052 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.050209999 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.050347090 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.050368071 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.070044994 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.070184946 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.070328951 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.070328951 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.070328951 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.072184086 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.072220087 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.072361946 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.072474003 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.072490931 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.383512974 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.383539915 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.766752005 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.767884016 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.767884016 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.767916918 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.767945051 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.787374973 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.788260937 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.788260937 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.788285017 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.788311958 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.788855076 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.789407015 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.789433956 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.789702892 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.789710045 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.796500921 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.797439098 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.797439098 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.797471046 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.797492027 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.826834917 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.827718973 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.827718973 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.827768087 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.827783108 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.906447887 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.906864882 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.907026052 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.907026052 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.907191038 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.907213926 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.910284042 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.910325050 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.910510063 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.910588980 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.910598040 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.929066896 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.929265976 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.929513931 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.929513931 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.929642916 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.929657936 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.931106091 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.931246996 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.932429075 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.932483912 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.932502985 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.932502985 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.932634115 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.932717085 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.932718039 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.932733059 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.932737112 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.934525013 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.934627056 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.934792995 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.934792995 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.934849024 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.934854984 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.935455084 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.935492992 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.935683012 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.935936928 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.935956001 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.937411070 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.937448025 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.937943935 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.937943935 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.937992096 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.964734077 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.964848995 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.965014935 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.965014935 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.965055943 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.965071917 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.967643023 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.967681885 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:14.967830896 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.967966080 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:14.967978001 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.668363094 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.669320107 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.669321060 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.669361115 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.669387102 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.694175959 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.694610119 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.694632053 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.695055962 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.695071936 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.701879025 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.702601910 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.702601910 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.702626944 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.702652931 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.706044912 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.706424952 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.706449986 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.706702948 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.706713915 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.723530054 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.724271059 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.724272013 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.724337101 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.724383116 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.730331898 CEST	49797	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:59:15.730396032 CEST	443	49797	216.58.206.68	192.168.2.4
Oct 24, 2024 07:59:15.732263088 CEST	49797	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:59:15.732263088 CEST	49797	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:59:15.732300997 CEST	443	49797	216.58.206.68	192.168.2.4
Oct 24, 2024 07:59:15.807089090 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.807363987 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.807420015 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.807466030 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.807491064 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.807507038 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.807513952 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.810321093 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.810365915 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.810445070 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.810570002 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.810583115 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.832590103 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.832884073 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.832937002 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.832972050 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.832992077 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.833008051 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.833013058 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.835426092 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.835468054 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.835872889 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.835872889 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.835910082 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.842324018 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.842426062 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.842473984 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.842546940 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.842561007 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.842572927 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.842576981 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.844619036 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.844660044 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.844722033 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.844862938 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.844875097 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.847028971 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.847136974 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.847182989 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.847296000 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.847296000 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.847304106 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.847321033 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.849072933 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.849102020 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.849277020 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.849443913 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.849457026 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.861953974 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.862241030 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.862330914 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.862377882 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.862390041 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.862399101 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.862404108 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.864159107 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.864168882 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:15.864226103 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.864334106 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:15.864343882 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.569243908 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.569690943 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.569730043 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.570185900 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.570193052 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.589452982 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.589988947 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.590051889 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.590215921 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.590223074 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.592433929 CEST	443	49797	216.58.206.68	192.168.2.4
Oct 24, 2024 07:59:16.592734098 CEST	49797	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:59:16.592744112 CEST	443	49797	216.58.206.68	192.168.2.4
Oct 24, 2024 07:59:16.593197107 CEST	443	49797	216.58.206.68	192.168.2.4
Oct 24, 2024 07:59:16.593591928 CEST	49797	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:59:16.593669891 CEST	443	49797	216.58.206.68	192.168.2.4
Oct 24, 2024 07:59:16.600606918 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.600941896 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.600960970 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.601342916 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.601347923 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.619474888 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.619868040 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.619885921 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.620450020 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.620454073 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.633033037 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.633347034 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.633358002 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.633621931 CEST	49797	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:59:16.633824110 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.633829117 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.707523108 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.707580090 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.707642078 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.707813025 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.707844019 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.707863092 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.707870960 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.710469961 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.710522890 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.710582972 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.710716963 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.710730076 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.727118969 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.727453947 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.727526903 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.727603912 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.727622986 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.727642059 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.727648020 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.731302023 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.731343031 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.731677055 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.731868029 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.731880903 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.737973928 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.738221884 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.738281012 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.738550901 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.738569021 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.738595009 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.738601923 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.742317915 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.742357969 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.742950916 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.746309042 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.746325016 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.760056973 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.760196924 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.760376930 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.761591911 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.761591911 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.761605978 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.761616945 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.766309023 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.766325951 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.766467094 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.768534899 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.768548012 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.774847031 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.774954081 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.775198936 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.775198936 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.775403976 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.775413990 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.777092934 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.777108908 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:16.777266979 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.777326107 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:16.777340889 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.478526115 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.496089935 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.496145964 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.496903896 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.496912003 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.497294903 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.498816013 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.498847961 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.499454021 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.499468088 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.500431061 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.502652884 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.502674103 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.505247116 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.505253077 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.525612116 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.534209967 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.534229994 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.534742117 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.534755945 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.548578978 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.549443007 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.549454927 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.550322056 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.550327063 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.631786108 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.631999016 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.633624077 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.633848906 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.633850098 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.633850098 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.633917093 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.634098053 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.635961056 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.635987043 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.636017084 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.636023045 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.638984919 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.639198065 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.639389992 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.640641928 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.640681982 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.640788078 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.641463041 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.641465902 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.641477108 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.641509056 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.641513109 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.641521931 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.641594887 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.653461933 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.653462887 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.653481960 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.653484106 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.662328005 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.662348986 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.662501097 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.662636995 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.662657022 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.668606997 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.668890953 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.669064999 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.669094086 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.669094086 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.669109106 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.669116974 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.674432993 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.674479961 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.674695015 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.674840927 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.674860001 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.688877106 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.689066887 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.689137936 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.689173937 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.689173937 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.689181089 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.689188957 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.691353083 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.691370964 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.691531897 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.691664934 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.691677094 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:17.942776918 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:17.942828894 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.403903008 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.405611038 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.405677080 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.407442093 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.407455921 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.424293995 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.425019026 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.425046921 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.426142931 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.426148891 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.431781054 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.432518005 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.432527065 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.433815956 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.433820963 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.434345961 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.435136080 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.435194969 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.436197996 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.436213970 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.462444067 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.462891102 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.462910891 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.464163065 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.464169025 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.538836956 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.538995981 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.539180040 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.539561987 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.539613962 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.545878887 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.545919895 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.545977116 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.546610117 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.546633005 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.563769102 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.563904047 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.563951015 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.564245939 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.564269066 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.564284086 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.564291000 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.568391085 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.568681002 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.568737030 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.570389986 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.570399046 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.573160887 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.573299885 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.573379040 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.574213028 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.574265957 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.574301004 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.574318886 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.575383902 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.575427055 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.575485945 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.577996016 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.578013897 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.582695007 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.582731009 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.582801104 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.583091021 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.583108902 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.585556984 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.585594893 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.585654020 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.586117029 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.586134911 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.602938890 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.603250980 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.603296995 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.603499889 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.603507996 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.603547096 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.603549957 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.608757019 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.608839035 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:18.608915091 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.609241962 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:18.609277964 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.531662941 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.532495022 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.532562971 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.533171892 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.533185959 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.535537958 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.536243916 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.536283970 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.538315058 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.538326979 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.540812016 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.543606043 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.543627977 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.544255972 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.544260979 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.672507048 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.672569036 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.672897100 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.673091888 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.673091888 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.673147917 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.673172951 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.679725885 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.679898977 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.679904938 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.680022001 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.680382013 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.680628061 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.684528112 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.684528112 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.684559107 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.684580088 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.684711933 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.685781002 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.685805082 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.685923100 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.685923100 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.685942888 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.685956001 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.689049959 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.689059019 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.689075947 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.689109087 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.689182997 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.689292908 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.689477921 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.689528942 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:19.689826012 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:19.689853907 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.117072105 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.118581057 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.118599892 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.120395899 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.120399952 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.256279945 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.256408930 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.256452084 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.257246971 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.257267952 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.257287025 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.257292032 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.265733004 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.265763998 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.265888929 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.266362906 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.266381025 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.339787960 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.340719938 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.340739965 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.342618942 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.342626095 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.451948881 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.452852011 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.452877998 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.453942060 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.453958988 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.462694883 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.463577032 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.463639021 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.464884043 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.464901924 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.465315104 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.466032982 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.466065884 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.467570066 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.467582941 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.476008892 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.476178885 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.476233959 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.477097988 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.477122068 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.485058069 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.485131979 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.485203028 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.485928059 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.485961914 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.591370106 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.591579914 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.591629028 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.592128992 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.592158079 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.600580931 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.600682020 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.600764990 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.601134062 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.601170063 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.603477955 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.603607893 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.603871107 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.603939056 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.603970051 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.604010105 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.604026079 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.604947090 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.605148077 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.605202913 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.605443001 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.605467081 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.613075018 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.613166094 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.613238096 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.613790989 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.613835096 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.621339083 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.621377945 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:20.621428013 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.622179985 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:20.622193098 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.025787115 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.026335001 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.026413918 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.026876926 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.026891947 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.163830042 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.164222002 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.164427042 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.164474010 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.164474010 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.164499998 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.164513111 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.170447111 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.170551062 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.174568892 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.174568892 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.174659014 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.261332035 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.262893915 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.262893915 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.262968063 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.263010979 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.358105898 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.359366894 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.359366894 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.359430075 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.359471083 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.366781950 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.367559910 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.367650986 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.370332956 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.370351076 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.373900890 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.374316931 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.374349117 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.374938011 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.374943018 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.401031971 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.401176929 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.401448965 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.401448965 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.401530027 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.401571035 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.403789997 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.403830051 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.404068947 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.404068947 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.404103994 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.497067928 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.497289896 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.497526884 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.497526884 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.497574091 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.497596025 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.500360012 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.500421047 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.500585079 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.500711918 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.500730038 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.506334066 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.506484985 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.506589890 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.506589890 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.506766081 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.506807089 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.508740902 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.508800983 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.508949041 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.509084940 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.509098053 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.513144970 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.513360977 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.513454914 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.513454914 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.513583899 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.513596058 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.515449047 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.515458107 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:21.515531063 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.515733957 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:21.515748024 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.841728926 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.842202902 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.842220068 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.842633009 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.842639923 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.846077919 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.846576929 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.846628904 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.846931934 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.846940994 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.847743034 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.848040104 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.848072052 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.848376036 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.848382950 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.849471092 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.849716902 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.849730015 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.850068092 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.850074053 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.851274014 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.851588964 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.851598978 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.851913929 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.851921082 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.978763103 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.978849888 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.978924990 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.979850054 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.979872942 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.979885101 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.979893923 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.980804920 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.980987072 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.981190920 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.981190920 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.981190920 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.983072042 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.983083963 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.983119011 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.983131886 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.983189106 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.983191013 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.983319998 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.983330011 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.983338118 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.983344078 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.985758066 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.985830069 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.985878944 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.985932112 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.985939980 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.985958099 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.985961914 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.986385107 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.986435890 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.986565113 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.986588955 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.986609936 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.986650944 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.986674070 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.986689091 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.986697912 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.986707926 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.986715078 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.988425016 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.988508940 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.988590956 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.988641024 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.988720894 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.988735914 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.988760948 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.988820076 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.988864899 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.988873005 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.988884926 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.988888979 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.989065886 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.989089012 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.989273071 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.989440918 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.989455938 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.990478039 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.990498066 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:22.990562916 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.990734100 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:22.990766048 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.197092056 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.197177887 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.745085955 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.746061087 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.746061087 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.746088982 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.746099949 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.755899906 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.756659985 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.756659985 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.756704092 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.756716967 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.758348942 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.759018898 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.759020090 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.759036064 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.759047031 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.760474920 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.761077881 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.761079073 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.761148930 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.761177063 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.764545918 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.764852047 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.764884949 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.765146017 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.765156984 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.884526968 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.884578943 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.884704113 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.884829044 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.884829044 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.884954929 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.884973049 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.887803078 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.887902021 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.888045073 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.888171911 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.888195992 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.893506050 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.893557072 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.893738985 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.893774033 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.894013882 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.894013882 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.894013882 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.895292044 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.895529032 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.895663977 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.895986080 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.896003008 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.896034956 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.896039963 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.898169041 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.898171902 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.898181915 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.898205996 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.898360968 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.898363113 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.898484945 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.898492098 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.898587942 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.898602009 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.902184963 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.902206898 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.902266026 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.902384996 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.902421951 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.902489901 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.902512074 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.902553082 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.902559996 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.904697895 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.904714108 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.904810905 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.904927015 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.904936075 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.905386925 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.905560970 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.905822992 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.905822992 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.905903101 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.905917883 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.908112049 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.908159018 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:23.908302069 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.908392906 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:23.908413887 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.208332062 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.208379984 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.762319088 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.762964964 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.763001919 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.763935089 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.763951063 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.769279957 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.769717932 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.769723892 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.770781040 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.770783901 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.771617889 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.771888018 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.772630930 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.772680998 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.773580074 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.774574995 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.774590015 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.775958061 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.776011944 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.776568890 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.776582003 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.777252913 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.777268887 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.778000116 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.778009892 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.897042036 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.897119999 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.897181988 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.897654057 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.897667885 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.897675991 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.897686005 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.901166916 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.901241064 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.901336908 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.901628017 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.901649952 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.903743982 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.903914928 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.904129982 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.904294014 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.904299021 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.904320002 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.904324055 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.908031940 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.908091068 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.908174038 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.908255100 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.908317089 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.908379078 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.908754110 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.908783913 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.909127951 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.909152985 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.909179926 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.909193039 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.911268950 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.911519051 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.911583900 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.912529945 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.912576914 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.912611008 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.912626982 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.915661097 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.915807009 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.915868044 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.917355061 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.917385101 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.917532921 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.917545080 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.917576075 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.918150902 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.918170929 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.925220966 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.925266981 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.925354958 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.927241087 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.927273989 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.927275896 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.927304983 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:24.927352905 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.927525997 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:24.927556992 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.671283007 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.671891928 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.671943903 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.672569036 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.672579050 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.680926085 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.681341887 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.681380987 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.681936979 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.681950092 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.685211897 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.685534000 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.685563087 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.686058044 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.686064959 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.689851999 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.690133095 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.690164089 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.690588951 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.690594912 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.692393064 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.692728996 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.692751884 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.693289995 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.693298101 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.809122086 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.809295893 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.809381962 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.809518099 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.809542894 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.809572935 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.809577942 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.812557936 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.812654972 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.812793016 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.812983036 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.813014984 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.821959019 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.822107077 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.822182894 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.822254896 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.822290897 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.822323084 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.822336912 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.824440002 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.824482918 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.824556112 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.824676037 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.824692965 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.826330900 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.826412916 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.826466084 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.826477051 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.826515913 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.826572895 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.826591969 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.826603889 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.826617002 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.826622009 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.828520060 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.828561068 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.828648090 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.828804016 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.828815937 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.829144955 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.829210043 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.829319954 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.829365015 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.829365015 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.829390049 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.829427958 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.830735922 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.830982924 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.831051111 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.831187963 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.831244946 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.831264973 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.831274986 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.831279039 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.831284046 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.831355095 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.831487894 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.831523895 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.833170891 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.833178997 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:25.833302975 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.833422899 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:25.833431959 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.573189020 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.574206114 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.574278116 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.575526953 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.575547934 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.583368063 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.583879948 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.583926916 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.584615946 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.584629059 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.591761112 CEST	443	49797	216.58.206.68	192.168.2.4
Oct 24, 2024 07:59:26.591891050 CEST	443	49797	216.58.206.68	192.168.2.4
Oct 24, 2024 07:59:26.591952085 CEST	49797	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:59:26.592916012 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.594151020 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.594170094 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.594933033 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.594943047 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.596143961 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.597135067 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.597208977 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.597943068 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.597958088 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.605926991 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.606328964 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.606362104 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.606992006 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.607002974 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.711787939 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.711859941 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.711922884 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.711947918 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.711981058 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.712033033 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.712151051 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.712181091 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.712208033 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.712222099 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.719707966 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.719736099 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.719786882 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.719790936 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.719858885 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.730690956 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.730750084 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.730858088 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.733570099 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.733725071 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.733792067 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.746174097 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.746345997 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.746417046 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.754734993 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.754734993 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.754786015 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.754815102 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.780941963 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.781016111 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.781049967 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.781068087 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.795149088 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.795206070 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.795238018 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.795254946 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.803814888 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.803858995 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.803881884 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.803889990 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.817300081 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.817377090 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.817451954 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.819165945 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.819200039 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.821355104 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.821388960 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.821455002 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.821852922 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.821865082 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.824342012 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.824403048 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.824455023 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.825160980 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.825169086 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.825227976 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.826920033 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.826955080 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.827027082 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.827364922 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.827399969 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.827855110 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.827863932 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:26.828090906 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:26.828124046 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.581135035 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.581896067 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.581944942 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.582540989 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.582549095 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.585006952 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.585582972 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.585678101 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.586210012 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.586225986 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.598810911 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.599441051 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.599500895 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.599533081 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.599622011 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.600399971 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.600405931 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.600913048 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.600938082 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.601516962 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.601528883 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.601986885 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.601996899 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.602814913 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.602822065 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.717571974 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.717730999 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.717825890 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.718296051 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.718321085 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.723412991 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.723443031 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.723665953 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.723978996 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.723995924 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.724499941 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.724663019 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.724761963 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.724803925 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.724803925 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.724828005 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.724842072 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.728965998 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.729008913 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.729072094 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.729243040 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.729257107 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.731786966 CEST	49797	443	192.168.2.4	216.58.206.68
Oct 24, 2024 07:59:27.731801033 CEST	443	49797	216.58.206.68	192.168.2.4
Oct 24, 2024 07:59:27.739456892 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.739604950 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.739797115 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.739846945 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.739878893 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.739892006 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.740050077 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.740104914 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.740665913 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.740665913 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.740673065 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.740681887 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.754190922 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.754214048 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.754303932 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.754549026 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.754563093 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.755726099 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.755748987 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.755953074 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.756135941 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.756149054 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.772409916 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.772592068 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.772629976 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.772650957 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.772695065 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.772733927 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.772751093 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.772762060 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.772768021 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.776585102 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.776664972 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:27.776854992 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.777111053 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:27.777148008 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.480989933 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.481525898 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.481548071 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.481965065 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.481971025 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.493134975 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.493482113 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.493515968 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.493887901 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.493896961 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.518924952 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.519251108 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.519272089 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.519607067 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.519612074 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.522365093 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.522665024 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.522720098 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.523003101 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.523016930 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.526401043 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.526746035 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.526762009 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.527129889 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.527134895 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.616581917 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.616784096 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.616851091 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.616940975 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.616961002 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.616975069 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.616982937 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.619679928 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.619719982 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.619781971 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.619908094 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.619916916 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.633003950 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.633131981 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.633234024 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.633269072 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.633292913 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.633352995 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.633383036 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.633383036 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.633404970 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.633415937 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.635574102 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.635685921 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.635766029 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.635912895 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.635952950 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.656467915 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.656635046 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.656693935 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.656745911 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.656745911 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.656775951 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.656790018 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.658705950 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.658740997 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.658813953 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.658973932 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.658987999 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.660073042 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.660211086 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.660260916 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.660264015 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.660317898 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.660360098 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.660360098 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.660389900 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.660413980 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.662369967 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.662460089 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.662537098 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.662661076 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.662695885 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.666749954 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.666913986 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.666963100 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.666986942 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.667001009 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.667013884 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.667020082 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.668880939 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.668904066 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:28.669059992 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.669208050 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:28.669219017 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.471873999 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.472346067 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.472385883 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.472829103 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.472835064 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.473356962 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.473649979 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.473699093 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.474014997 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.474021912 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.600605965 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.601052999 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.601159096 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.601480007 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.601495028 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.606993914 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.607434988 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.607459068 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.608128071 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.608138084 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.608539104 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.608870983 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.608896017 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.609244108 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.609258890 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.610835075 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.611000061 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.611573935 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.611725092 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.611749887 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.611763000 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.611769915 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.613107920 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.613262892 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.613432884 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.613466978 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.613487959 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.613497019 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.613502979 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.617640018 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.617721081 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.617799997 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.617964029 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.618000031 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.618985891 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.619035006 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.619147062 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.619297028 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.619338036 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.738588095 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.738796949 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.738840103 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.738997936 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.738998890 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.739114046 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.739114046 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.739162922 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.739196062 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.741450071 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.741496086 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.741574049 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.741899967 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.741921902 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.743993044 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.744524002 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.744719028 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.744719028 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.744719028 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.746732950 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.746877909 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.746947050 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.747003078 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.747014046 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.747021914 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.747025967 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.747034073 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.747071981 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.747170925 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.747540951 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.747559071 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.749453068 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.749486923 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.749548912 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.749706984 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.749725103 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:29.958843946 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:29.958878994 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.380363941 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.381004095 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.381095886 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.381318092 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.381333113 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.467377901 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.467874050 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.467895031 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.468408108 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.468413115 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.510353088 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.510807991 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.510869026 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.511210918 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.511224985 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.513732910 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.514041901 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.514077902 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.514192104 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.514401913 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.514415979 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.514540911 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.514559984 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.514905930 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.514914036 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.517731905 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.517911911 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.518038034 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.518127918 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.518127918 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.518174887 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.518203974 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.520713091 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.520776033 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.520865917 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.521014929 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.521045923 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.603971958 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.604145050 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.604212999 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.604289055 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.604306936 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.604315996 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.604321957 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.607156992 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.607182026 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.607234001 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.607357979 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.607364893 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.647362947 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.647474051 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.647572041 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.647661924 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.647661924 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.647703886 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.647731066 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.650223017 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.650321960 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.650408030 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.650582075 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.650619030 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.651810884 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.651953936 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.652031898 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.652082920 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.652101040 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.652115107 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.652120113 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.653825045 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.653955936 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.653997898 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.654025078 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.654055119 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.654119015 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.654150963 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.654233932 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.654236078 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.654247046 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.654266119 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.654270887 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.654361963 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.654373884 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.656301022 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.656328917 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:30.656578064 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.656708002 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:30.656735897 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.279939890 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.281070948 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.281071901 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.281141043 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.281188011 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.368987083 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.370161057 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.370161057 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.370188951 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.370198965 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.404753923 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.405788898 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.405790091 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.405854940 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.405901909 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.415626049 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.416229010 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.416249990 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.418261051 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.418313980 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.418325901 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.418427944 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.420025110 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.420351982 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.420888901 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.420888901 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.420900106 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.420912027 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.421138048 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.421175957 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.421221018 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.421236992 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.424762964 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.424813986 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.425038099 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.425038099 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.425101995 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.505867958 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.506012917 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.506067991 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.506145000 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.506227970 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.506227970 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.506244898 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.506253958 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.510332108 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.510396004 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.510705948 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.510896921 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.510919094 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.543061972 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.543221951 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.543503046 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.543503046 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.543503046 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.545696974 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.545794010 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.545934916 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.546041012 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.546066999 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.553817034 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.553982973 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.554121971 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.554121971 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.554164886 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.554205894 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.556600094 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.556636095 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.556781054 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.556901932 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.556919098 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.560545921 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.560707092 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.560748100 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.560770035 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.560801029 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.560839891 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.560839891 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.560847998 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.560853958 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.563376904 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.563411951 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.563600063 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.563600063 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.563626051 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:31.849591017 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:31.849654913 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.863605022 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.864116907 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:32.864164114 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.864532948 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.864559889 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:32.864568949 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.864842892 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:32.864861965 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.865304947 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:32.865313053 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.867137909 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.867508888 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.876785994 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:32.876859903 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.877249002 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:32.877264023 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.877482891 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:32.877497911 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.877861023 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:32.877871990 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.887170076 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.887502909 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:32.887521029 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:32.888374090 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:32.888380051 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.007427931 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.007642984 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.008021116 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.008117914 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.008147001 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.008160114 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.008164883 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.010114908 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.010195971 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.010339022 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.010596991 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.010644913 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.010931969 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.010943890 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.010953903 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.010957956 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.010967970 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.011840105 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.011862040 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.013084888 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.013130903 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.013370991 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.013423920 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.013442993 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.013501883 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.013539076 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.013572931 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.013689041 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.013703108 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.013748884 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.013748884 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.013748884 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.014225960 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.014297962 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.014362097 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.014378071 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.014408112 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.014497042 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.014534950 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.014571905 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.014573097 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.014591932 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.014611959 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.015774965 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.015790939 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.015866995 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.015961885 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.015975952 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.016606092 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.016684055 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.016752958 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.016947985 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.016982079 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.026752949 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.026827097 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.026932001 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.027034044 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.027117014 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.027117014 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.027133942 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.027146101 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.028886080 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.028964043 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.029103041 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.029236078 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.029272079 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.318233967 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.318317890 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.785794020 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.785979986 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.786528111 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.786545038 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.786607981 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.786654949 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.787492990 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.787499905 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.787617922 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.787623882 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.789657116 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.790026903 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.790036917 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.790538073 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.790544033 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.801100016 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.801470995 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.801491976 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.801532984 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.801928997 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.802000999 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.802041054 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.802054882 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.802463055 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.802480936 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.925659895 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.925786972 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.925879002 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.926135063 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.926135063 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.926158905 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.926172018 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.926604033 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.926763058 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.926824093 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.927102089 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.927131891 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.929477930 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.929553032 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.929599047 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.929625988 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.929709911 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.929750919 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.929766893 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.929790974 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.929991961 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.930023909 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.932195902 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.932272911 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.932394028 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.932424068 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.932431936 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.932444096 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.932450056 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.935309887 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.935359955 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.935431957 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.935725927 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.935745955 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.942333937 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.942408085 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.942517042 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.942539930 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.942569971 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.942650080 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.942677021 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.942699909 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.942713976 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.942970037 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.943110943 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.943176985 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.943774939 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.943774939 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.943802118 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.943841934 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.945756912 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.945847988 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.945852995 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.945873976 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.945935011 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.945946932 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.946125031 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.946155071 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:33.946167946 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:33.946171045 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.687657118 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.687974930 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.688111067 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.688139915 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.688448906 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.688514948 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.688844919 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.688849926 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.688946962 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.688961029 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.701575994 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.701925039 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.701945066 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.702430010 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.702435017 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.710860014 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.711182117 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.711199045 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.711700916 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.711705923 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.720911026 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.721260071 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.721314907 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.721775055 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.721788883 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.825285912 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.825376987 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.825434923 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.825509071 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.825613976 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.825613976 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.825684071 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.825722933 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.826231956 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.826327085 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.826570988 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.826571941 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.826785088 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.826827049 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.829113960 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.829221010 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.829236031 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.829319000 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.829344034 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.829437017 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.829545021 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.829562902 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.829591990 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.829605103 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.839976072 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.840151072 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.840229034 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.840290070 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.840290070 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.840308905 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.840327024 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.842735052 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.842780113 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.842889071 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.843080044 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.843106031 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.849159002 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.849227905 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.849340916 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.849360943 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.849399090 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.849479914 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.849486113 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.849500895 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.849507093 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.851938009 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.852037907 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.852632046 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.852788925 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.852827072 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.860446930 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.860609055 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.860723019 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.860723019 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.861680984 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.861722946 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.863490105 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.863522053 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 24, 2024 07:59:34.863662958 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.863708019 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 24, 2024 07:59:34.863717079 CEST	443	49895	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 07:58:11.293378115 CEST	53	53056	1.1.1.1	192.168.2.4
Oct 24, 2024 07:58:11.302947044 CEST	53	63691	1.1.1.1	192.168.2.4
Oct 24, 2024 07:58:12.716784000 CEST	53	54508	1.1.1.1	192.168.2.4
Oct 24, 2024 07:58:13.464854002 CEST	64523	53	192.168.2.4	1.1.1.1
Oct 24, 2024 07:58:13.465233088 CEST	60374	53	192.168.2.4	1.1.1.1
Oct 24, 2024 07:58:13.472865105 CEST	53	64523	1.1.1.1	192.168.2.4
Oct 24, 2024 07:58:13.488389969 CEST	53	60374	1.1.1.1	192.168.2.4
Oct 24, 2024 07:58:15.662436008 CEST	64026	53	192.168.2.4	1.1.1.1
Oct 24, 2024 07:58:15.662668943 CEST	51775	53	192.168.2.4	1.1.1.1
Oct 24, 2024 07:58:15.669784069 CEST	53	51775	1.1.1.1	192.168.2.4
Oct 24, 2024 07:58:15.670001030 CEST	53	64026	1.1.1.1	192.168.2.4
Oct 24, 2024 07:58:29.089740038 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 07:58:29.623671055 CEST	53	63009	1.1.1.1	192.168.2.4
Oct 24, 2024 07:58:48.373068094 CEST	53	63180	1.1.1.1	192.168.2.4
Oct 24, 2024 07:59:10.856827021 CEST	53	50259	1.1.1.1	192.168.2.4
Oct 24, 2024 07:59:11.116942883 CEST	53	51837	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 07:58:13.488549948 CEST	192.168.2.4	1.1.1.1	c237	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 07:58:13.464854002 CEST	192.168.2.4	1.1.1.1	0x5c84	Standard query (0)	email.sg.on24event.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 07:58:13.465233088 CEST	192.168.2.4	1.1.1.1	0x4376	Standard query (0)	email.sg.on24event.com	65	IN (0x0001)	false
Oct 24, 2024 07:58:15.662436008 CEST	192.168.2.4	1.1.1.1	0xdd69	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 07:58:15.662668943 CEST	192.168.2.4	1.1.1.1	0x1239	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 07:58:13.472865105 CEST	1.1.1.1	192.168.2.4	0x5c84	No error (0)	email.sg.on24event.com	r-email.sg.on24event.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 07:58:13.472865105 CEST	1.1.1.1	192.168.2.4	0x5c84	No error (0)	r-email.sg.on24event.com		199.83.44.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 07:58:13.488389969 CEST	1.1.1.1	192.168.2.4	0x4376	No error (0)	email.sg.on24event.com	r-email.sg.on24event.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 07:58:15.669784069 CEST	1.1.1.1	192.168.2.4	0x1239	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 07:58:15.670001030 CEST	1.1.1.1	192.168.2.4	0xdd69	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 07:58:24.922616005 CEST	1.1.1.1	192.168.2.4	0xab45	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 07:58:24.922616005 CEST	1.1.1.1	192.168.2.4	0xab45	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 07:58:26.814251900 CEST	1.1.1.1	192.168.2.4	0xbe2a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 07:58:26.814251900 CEST	1.1.1.1	192.168.2.4	0xbe2a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 07:58:44.732758999 CEST	1.1.1.1	192.168.2.4	0x4558	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 07:58:44.732758999 CEST	1.1.1.1	192.168.2.4	0x4558	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 07:59:03.436801910 CEST	1.1.1.1	192.168.2.4	0xe2b0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 07:59:03.436801910 CEST	1.1.1.1	192.168.2.4	0xe2b0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 07:59:06.060426950 CEST	1.1.1.1	192.168.2.4	0x62e7	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 07:59:06.060426950 CEST	1.1.1.1	192.168.2.4	0x62e7	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 07:59:06.060426950 CEST	1.1.1.1	192.168.2.4	0x62e7	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 07:59:24.782654047 CEST	1.1.1.1	192.168.2.4	0xa390	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 07:59:24.782654047 CEST	1.1.1.1	192.168.2.4	0xa390	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

email.sg.on24event.com

https:

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	199.83.44.68	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:58:14 UTC	953	OUT	GET /ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIy HTTP/1.1 Host: email.sg.on24event.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 05:58:14 UTC	193	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 24 Oct 2024 05:58:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 291 Connection: close X-Robots-Tag: noindex, nofollow
2024-10-24 05:58:14 UTC	291	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 57 72 6f 6e 67 20 4c 69 6e 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 57 72 6f 6e 67 20 4c 69 6e 6b 3c 2f 68 31 3e 3c 70 3e 59 6f 75 20 68 61 76 65 20 63 6c 69 63 6b 65 64 20 6f 6e 20 61 6e 20 69 6e 76 61 6c 69 64 20 6c 69 6e 6b 2e 20 20 50 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 74 79 70 65 64 20 74 68 65 20 6c 69 6e 6b 20 63 6f 72 72 65 63 74 6c 79 2e 20 20 49 66 20 61 72 65 20 63 6f 70 79 69 6e 67 20 74 68 69 73 20 6c 69 6e 6b 20 66 72 6f 6d 20 61 20 6d 61 69 6c 20 72 65 61 64 65 72 20 70 6c 65 61 73 65 20 65 6e 73 75 72 65 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 63 6f 70 69 65 64 20 61 6c 6c 20 74 68 65 20 Data Ascii: <html><head><title>Wrong Link</title></head><body><h1>Wrong Link</h1><p>You have clicked on an invalid link. Please make sure that you have typed the link correctly. If are copying this link from a mail reader please ensure that you have copied all the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	199.83.44.68	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:58:15 UTC	888	OUT	GET /favicon.ico HTTP/1.1 Host: email.sg.on24event.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 05:58:15 UTC	143	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 24 Oct 2024 05:58:15 GMT Content-Type: text/html Content-Length: 564 Connection: close
2024-10-24 05:58:15 UTC	564	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:58:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 05:58:17 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=38810 Date: Thu, 24 Oct 2024 05:58:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:58:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 05:58:18 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=38888 Date: Thu, 24 Oct 2024 05:58:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 05:58:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:58:25 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YyD711KFBPhu16M&MD=rczcpRE4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 05:58:25 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d0a49ac5-bba6-49f4-b75d-54321196e8fb MS-RequestId: a2d32f0f-2d94-4a4e-8a61-07c8979ffa20 MS-CV: M5pwTXC0MEGL6Shi.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 05:58:25 GMT Connection: close Content-Length: 24490
2024-10-24 05:58:25 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 05:58:25 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:03 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YyD711KFBPhu16M&MD=rczcpRE4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 05:59:03 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 0323455a-16e1-4192-bb37-d6451120d543 MS-RequestId: aad5ffa3-39a5-451b-a256-b15abb7914aa MS-CV: 9v2zvOTaRUaWKa1s.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 05:59:03 GMT Connection: close Content-Length: 30005
2024-10-24 05:59:03 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-24 05:59:03 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49750	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:06 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:07 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:06 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055906Z-r1755647c66ww2rh494kknq3r00000000a20000000004z7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:07 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 05:59:07 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 05:59:07 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 05:59:07 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 05:59:07 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 05:59:07 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 05:59:07 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 05:59:07 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 05:59:07 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 05:59:07 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49753	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:08 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:08 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055908Z-r1755647c668mbb8rg8s8fbge40000000630000000006qmr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:08 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49754	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:08 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:08 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055908Z-17fbfdc98bbqc8zsbguzmabx6800000006r0000000004z00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49752	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:08 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:08 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 77f74883-b01e-0001-1a50-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055908Z-17fbfdc98bbpc9nz0r22pywp080000000700000000003rce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:08 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49755	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:08 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:08 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055908Z-r1755647c66f2zlraraf0y5hrs00000007qg000000006zqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:08 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49751	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:08 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:08 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:08 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: b8a73167-901e-0015-0f59-23b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055908Z-17fbfdc98bbczcjda6v8hpct4c00000000h00000000023hx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:08 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49756	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:09 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055909Z-r1755647c66nxct5p0gnwngmx000000008ng0000000029kv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49758	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:09 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055909Z-r1755647c66d87vp2n0g7qt8bn00000008g0000000005z39 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49759	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:09 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:09 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055909Z-r1755647c66sxs9zhy17bg185w0000000a20000000004xgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:09 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49757	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:09 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:09 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a0191c6f-501e-0047-3c5d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055909Z-17fbfdc98bbczcjda6v8hpct4c00000000kg0000000023ux x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49760	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:09 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:09 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 895e1389-601e-005c-16b8-20f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055909Z-r1755647c66dj7986akr8tvaw400000008pg000000000wpd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:09 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49762	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:10 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 20eafa8b-401e-0067-4901-2009c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055910Z-r1755647c66mgrw7zd8m1pn55000000007tg000000004p4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49761	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:10 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055910Z-r1755647c66xrxq4nv7upygh4s00000002x000000000174d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49763	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:10 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a95f3241-e01e-0020-1c5d-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055910Z-17fbfdc98bbl89flqtm21qm6rn00000006w0000000005gq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49764	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:10 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: a48fb397-901e-008f-6356-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055910Z-17fbfdc98bb7qlzm4x52d2225c00000006v0000000003w8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49765	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:10 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055910Z-r1755647c66cdf7jx43n17haqc0000000a6g000000000nw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49769	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:11 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055911Z-r1755647c66zs9x4962sbyaz1w00000007h0000000002m9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49766	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:11 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:11 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: fe83e199-601e-00ab-415a-2366f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055911Z-17fbfdc98bb9tt772yde9rhbm800000006xg000000001x92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:11 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49767	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:11 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c39ac956-e01e-001f-465d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055911Z-17fbfdc98bb6q7cv86r4xdspkg00000006u0000000006erk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49768	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:11 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:11 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055911Z-17fbfdc98bbgpkh7048gc3vfcc000000070g000000002m7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:11 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49770	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:11 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055911Z-r1755647c668mbb8rg8s8fbge400000006800000000024ke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:11 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49772	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:12 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055912Z-r1755647c66gb86l6k27ha2m1c00000007sg000000004wdk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49773	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:12 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055912Z-r1755647c66k9st9tvd58z9dg8000000097g000000007762 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49775	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:12 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6949b098-b01e-0084-1a35-21d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055912Z-r1755647c66fnxpdavnqahfp1w00000007fg000000005fus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:12 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49774	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:12 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:12 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b93710ac-501e-007b-525a-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055912Z-17fbfdc98bbgzrcvp7acfz2d3000000006zg000000001p13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:12 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49776	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:12 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:12 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055912Z-17fbfdc98bbrx2rj4asdpg8sbs00000002x0000000001203 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:12 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49779	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:12 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055912Z-r1755647c66h2wzt2z0cr0zc7400000003kg0000000005qr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49778	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:12 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: ba25aa5e-401e-0015-7950-230e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055912Z-17fbfdc98bbvwcxrk0yzwg4d5800000006wg000000003yf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49780	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:12 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 55f0b2c4-501e-008f-5c50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055913Z-17fbfdc98bbgpkh7048gc3vfcc000000073g0000000004pu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49777	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:12 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:13 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055913Z-17fbfdc98bbqc8zsbguzmabx6800000006w0000000000ey0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:13 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49781	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:13 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: c04d3aa5-c01e-002b-4b56-236e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055913Z-17fbfdc98bbx4f4q0941cebmvs00000006vg000000001uxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49784	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:13 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055913Z-r1755647c66sn7s9kfw6gzvyp0000000098g0000000067dv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49782	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:13 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:13 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055913Z-17fbfdc98bbndwgn5b4pg7s8bs00000006t000000000434g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:14 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49783	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:13 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 36d132e2-e01e-0051-5c92-1f84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055913Z-r1755647c66xn9fj09y3bhxnh40000000a6g000000000ry4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49785	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:13 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 5cd52618-301e-0033-5865-23fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055913Z-17fbfdc98bb6j78ntkx6e2fx4c00000006q00000000063gg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49786	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:13 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:13 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: ee1aea59-301e-0052-0750-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055913Z-17fbfdc98bb7qlzm4x52d2225c00000006zg000000000343 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:14 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49787	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:14 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:14 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: ad3e5457-301e-0099-155a-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055914Z-17fbfdc98bbqc8zsbguzmabx6800000006qg000000004er9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:14 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49788	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:14 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e337ee23-e01e-003c-1ecf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055914Z-r1755647c66j878m0wkraqty3800000007w0000000002kah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49789	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:14 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055914Z-17fbfdc98bbczcjda6v8hpct4c00000000p0000000000pzz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49790	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:14 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:14 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055914Z-17fbfdc98bb94gkbvedtsa5ef400000006ug000000006edf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:14 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49791	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:14 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1b8ca13b-901e-008f-4667-2067a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055914Z-r1755647c66vrwbmeqw88hpesn0000000960000000000dqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:14 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49792	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:15 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:15 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3589f4cc-c01e-0079-731b-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055915Z-r1755647c66cdf7jx43n17haqc0000000a7000000000088u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:15 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49795	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:15 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:15 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b6b4fe6b-401e-008c-805d-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055915Z-17fbfdc98bbnhb2b0umpa641c800000006s0000000004cab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:15 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49793	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:15 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:15 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1bb7fc0c-c01e-0046-7759-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055915Z-17fbfdc98bbkw9phumvsc7yy8w00000006ug00000000402s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:15 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49794	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:15 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:15 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0c1e418e-701e-0021-2a50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055915Z-17fbfdc98bb9dlh7es9mrdw2qc00000006qg000000004t9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:15 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49796	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:15 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:15 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 0658eb7f-f01e-003f-5292-1fd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055915Z-r1755647c66ww2rh494kknq3r00000000a60000000001ahe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:15 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49798	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:16 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:16 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f6bed088-301e-0000-1a9a-24eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055916Z-17fbfdc98bbg2mc9qrpn009kgs00000006z00000000047c3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:16 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49799	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:16 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055916Z-r1755647c66l72xfkr6ug378ks000000089g0000000017hr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49800	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:16 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 629c9caa-001e-0079-2150-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055916Z-17fbfdc98bbnpjstwqrbe0re7n00000006rg000000005t6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49801	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:16 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9cd877b9-501e-0016-1f56-23181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055916Z-17fbfdc98bbq2x5bzrteug30v800000006wg000000002dh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49802	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:16 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 8ae0ddcf-601e-0002-0c50-23a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055916Z-17fbfdc98bbczcjda6v8hpct4c00000000kg0000000023wr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49803	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:17 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4edb1b06-d01e-00a1-56e1-2035b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055917Z-r1755647c66kmfl29f2su56tc40000000a3g0000000040be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49804	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:17 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055917Z-17fbfdc98bbwfg2nvhsr4h37pn00000006y0000000002ubx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49805	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:17 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1c3f4cdf-f01e-0096-775d-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055917Z-17fbfdc98bbpc9nz0r22pywp08000000071g000000001tp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49806	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:17 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055917Z-r1755647c66ldfgxa3qp9d53us000000097g000000007c55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49807	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:17 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055917Z-r1755647c66ldfgxa3qp9d53us00000009bg000000003qv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49808	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:18 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:18 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 750d06c7-901e-0083-2d5b-20bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055918Z-r1755647c66h2wzt2z0cr0zc7400000003e00000000046ft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:18 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49809	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:18 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:18 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8832b605-d01e-0014-3350-23ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055918Z-17fbfdc98bbgpkh7048gc3vfcc000000072g000000000zx3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:18 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:18 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055918Z-r1755647c66c9glmgg3prd89mn00000009d0000000001wf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:18 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:18 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 97d7c53d-b01e-001e-2be3-200214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055918Z-r1755647c66sn7s9kfw6gzvyp000000009bg000000003b7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:18 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: e131a16a-201e-005d-6a5d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055918Z-17fbfdc98bb9dlh7es9mrdw2qc00000006t0000000001w4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:18 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:19 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f2361012-b01e-003e-18e4-218e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055919Z-r1755647c66mgrw7zd8m1pn55000000007t0000000004kft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:19 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: df53dfe1-801e-0067-2856-23fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055919Z-17fbfdc98bbvf2fnx6t6w0g25n00000006v0000000004v8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:19 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055919Z-17fbfdc98bbnhb2b0umpa641c800000006qg000000005evu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:20 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055920Z-r1755647c66fnxpdavnqahfp1w00000007m00000000022wx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:20 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ae9ee863-001e-000b-78d3-2015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055920Z-r1755647c66sn7s9kfw6gzvyp00000000990000000004v1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:20 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055920Z-r1755647c66zs9x4962sbyaz1w00000007f0000000004x4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:20 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:20 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055920Z-17fbfdc98bbvf2fnx6t6w0g25n00000006ug0000000064k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:20 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:20 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055920Z-r1755647c66nxct5p0gnwngmx000000008q0000000000fus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49821	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:21 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055921Z-r1755647c66dj7986akr8tvaw400000008h0000000005rey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49822	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:21 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:21 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055921Z-17fbfdc98bbrx2rj4asdpg8sbs00000002u0000000003p8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:21 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:21 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 5871072e-001e-0034-4bb0-20dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055921Z-r1755647c66c9glmgg3prd89mn00000009e0000000000y1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:21 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 610ea227-401e-00ac-206b-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055921Z-17fbfdc98bb4k5z6ayu7yh2rsn00000006x0000000004bp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:21 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:21 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 6540ac04-301e-0099-1196-1f6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055921Z-r1755647c66qqfh4kbna50rqv40000000a2g000000004u0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:21 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:22 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:22 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055922Z-r1755647c66z4pt7cv1pnqayy400000009bg000000003hvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:22 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:22 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055922Z-r1755647c668mbb8rg8s8fbge400000006500000000051ha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49828	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:22 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:22 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:22 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055922Z-r1755647c66h2wzt2z0cr0zc7400000003d0000000005n5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:22 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:22 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:22 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055922Z-17fbfdc98bb8xnvm6t4x6ec5m400000006qg000000004243 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:22 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49830	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:22 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:22 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055922Z-r1755647c66mgrw7zd8m1pn55000000007qg000000007uh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:22 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:23 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:23 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055923Z-17fbfdc98bbq2x5bzrteug30v800000006w000000000373a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:23 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:23 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:23 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 47efb004-101e-0017-69d3-2047c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055923Z-r1755647c66zs9x4962sbyaz1w00000007gg000000003rvp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:23 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:23 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5a8d2ac8-001e-0034-336b-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055923Z-17fbfdc98bblvnlh5w88rcarag0000000700000000002pxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:23 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:23 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 639ae494-d01e-0082-069a-20e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055923Z-r1755647c66sxs9zhy17bg185w0000000a1g000000005tcv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:23 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49835	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:23 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:23 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 46032cb8-c01e-007a-5b59-23b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055923Z-17fbfdc98bbq2x5bzrteug30v800000006x0000000002ft7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:23 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:24 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:24 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 37f3233a-001e-0082-4c59-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055924Z-17fbfdc98bbx4f4q0941cebmvs00000006vg000000001v21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:24 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:24 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055924Z-r1755647c66h2wzt2z0cr0zc7400000003d0000000005n66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:24 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:24 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a52fde13-501e-0078-6a5d-2306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055924Z-17fbfdc98bbqc8zsbguzmabx6800000006vg0000000010k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:24 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:24 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055924Z-r1755647c66qqfh4kbna50rqv40000000a500000000029d1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:24 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:24 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:24 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 514e14b5-c01e-0014-51c9-20a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055924Z-r1755647c66d87vp2n0g7qt8bn00000008hg00000000482k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:24 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:25 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:25 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055925Z-17fbfdc98bbrx2rj4asdpg8sbs00000002y0000000000czv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:25 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:25 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:25 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055925Z-r1755647c66f2zlraraf0y5hrs00000007r0000000006pzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:25 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:25 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:25 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055925Z-r1755647c66f2zlraraf0y5hrs00000007t0000000004h6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:25 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:25 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:25 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ef02ab36-401e-0064-3bb0-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055925Z-r1755647c66cdf7jx43n17haqc0000000a50000000002fzm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:25 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:25 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:25 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 3bea9ec9-701e-0098-2c9f-24395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055925Z-r1755647c66tmf6g4720xfpwpn0000000a2g0000000049za x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:25 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:26 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:26 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055926Z-17fbfdc98bbkw9phumvsc7yy8w00000006xg000000001ncp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:26 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:26 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:26 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: c2ed4d23-701e-0098-0959-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055926Z-17fbfdc98bbvf2fnx6t6w0g25n0000000700000000001u7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:26 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49848	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:26 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:26 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055926Z-r1755647c66prnf6k99z0m3kzc00000009eg000000000hh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:26 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:26 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:26 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 28cefb6f-601e-003d-6a50-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055926Z-17fbfdc98bbx648l6xmxqcmf2000000006wg000000002fqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:26 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:26 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:26 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: ee1afe0a-301e-0052-2b50-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055926Z-17fbfdc98bb7qlzm4x52d2225c00000006t000000000589q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:26 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:27 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:27 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cc75a80d-201e-0096-720b-22ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055927Z-r1755647c66l72xfkr6ug378ks00000008ag0000000001y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:27 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:27 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055927Z-r1755647c66l72xfkr6ug378ks0000000840000000006e5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:27 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:27 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0efe6ec1-b01e-0053-7d56-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055927Z-r1755647c66dj7986akr8tvaw400000008fg00000000739a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:27 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:27 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:27 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055927Z-r1755647c66vrwbmeqw88hpesn00000008yg0000000074sf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:27 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:27 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:27 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055927Z-r1755647c66wjht63r8k9qqnrs00000007y0000000000es7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:27 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:28 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:28 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 3ed3a1a2-201e-0085-145a-2334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055928Z-17fbfdc98bbx648l6xmxqcmf2000000006v0000000003g4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:28 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:28 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:28 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055928Z-17fbfdc98bbnhb2b0umpa641c800000006q000000000694z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:28 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:28 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:28 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: fca683ae-601e-0070-466b-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055928Z-17fbfdc98bb6j78ntkx6e2fx4c00000006xg0000000004q2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:28 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:28 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a4c96680-901e-008f-156c-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055928Z-17fbfdc98bbnhb2b0umpa641c800000006w0000000001a1v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:28 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:28 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:28 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055928Z-17fbfdc98bbczcjda6v8hpct4c00000000kg0000000023yz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:28 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:29 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055929Z-r1755647c66vrwbmeqw88hpesn000000091g000000004aag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:29 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:29 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: ba25bf78-401e-0015-2450-230e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055929Z-r1755647c66j878m0wkraqty3800000007wg00000000179c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:29 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:29 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055929Z-17fbfdc98bb4k5z6ayu7yh2rsn000000071g000000000cgs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:29 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:29 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055929Z-r1755647c66l72xfkr6ug378ks000000083g0000000065da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:29 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:29 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 475da012-701e-0001-146c-23b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055929Z-17fbfdc98bb7qlzm4x52d2225c00000006u000000000441y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:29 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:30 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:30 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055930Z-r1755647c66kmfl29f2su56tc40000000a1g0000000053m6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:30 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:30 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:30 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055930Z-r1755647c66nfj7t97c2qyh6zg000000064g0000000056ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:30 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:30 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:30 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 728679af-d01e-007a-566c-23f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055930Z-17fbfdc98bbgpkh7048gc3vfcc0000000730000000000w9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:30 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:30 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:30 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 2e9d796b-b01e-00ab-5859-23dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055930Z-17fbfdc98bbq2x5bzrteug30v800000006sg000000005ut7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:30 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:30 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:30 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 1aa3d3a7-101e-0034-0792-1f96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055930Z-r1755647c66sn7s9kfw6gzvyp000000009c0000000003g23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:30 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:31 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:31 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: e889516a-701e-003e-5092-1f79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055931Z-r1755647c66kmfl29f2su56tc40000000a70000000000e6k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:31 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:31 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:31 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055931Z-r1755647c66dj7986akr8tvaw400000008g0000000006c4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:31 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49873	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:31 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:31 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055931Z-r1755647c66nfj7t97c2qyh6zg000000066g000000002gff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:31 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:31 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:31 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: ee3730f2-f01e-003f-725a-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055931Z-17fbfdc98bb9tt772yde9rhbm800000006s0000000006frb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:31 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:31 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:31 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: dc073066-d01e-0065-6c50-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055931Z-17fbfdc98bbg2mc9qrpn009kgs000000072g00000000108t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:31 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:32 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:32 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055932Z-r1755647c66k9st9tvd58z9dg800000009a00000000040uk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:33 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49879	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:32 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:32 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 26312148-601e-003e-327a-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055932Z-17fbfdc98bbvwcxrk0yzwg4d5800000006yg000000002rxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:33 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:32 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:32 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: fa7d2ad1-701e-0098-7450-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055932Z-17fbfdc98bblptj7fr9s141cpc00000006v0000000003tc7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:33 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49876	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:32 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:32 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 9144373a-f01e-005d-575a-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055932Z-17fbfdc98bbnhb2b0umpa641c800000006xg0000000007px x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:33 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49880	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:32 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:32 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055932Z-r1755647c66nfj7t97c2qyh6zg0000000620000000006uec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:33 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49883	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:33 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055933Z-r1755647c66s2pfjx11r8ys39000000000g00000000049wx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49882	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:33 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055933Z-17fbfdc98bb94gkbvedtsa5ef400000006w0000000005b24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49881	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:33 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:33 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: a6907b5e-801e-0047-4517-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055933Z-r1755647c66xrxq4nv7upygh4s00000002vg000000002ea6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:33 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49885	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:33 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:33 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c25cd208-b01e-0070-595d-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055933Z-17fbfdc98bb75b2fuh11781a0n00000006wg000000000sv9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:33 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:33 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:33 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055933Z-r1755647c66mgrw7zd8m1pn55000000007w0000000001vus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:33 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49886	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:34 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:34 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: d9c148d9-d01e-00ad-325d-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055934Z-17fbfdc98bb96dqv0e332dtg6000000006sg000000003xpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:34 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49887	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:34 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:34 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 9e5c5f24-f01e-001f-3156-235dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055934Z-17fbfdc98bb2fzn810kvcg2zng00000006x0000000005uk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:34 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49888	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:34 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 472c62b4-c01e-00a1-2e5d-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055934Z-17fbfdc98bblptj7fr9s141cpc00000006u0000000004634 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49890	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:34 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:34 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: b91d5e6a-e01e-0085-2c6c-23c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055934Z-17fbfdc98bbnhb2b0umpa641c800000006xg0000000007qb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:34 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49889	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:34 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 1bb821d9-c01e-0046-5959-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055934Z-17fbfdc98bbg2mc9qrpn009kgs00000006xg0000000050wx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49892	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:35 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:35 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 65345610-301e-0099-5492-1f6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055935Z-r1755647c66tmf6g4720xfpwpn0000000a10000000004xz2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:35 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49893	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:35 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:35 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 914440ca-f01e-005d-6f5a-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055935Z-17fbfdc98bbl89flqtm21qm6rn00000006w0000000005gta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:35 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49894	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:35 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:35 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:35 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 08f72666-401e-0015-30d8-210e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055935Z-r1755647c66j878m0wkraqty3800000007x0000000001h24 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:35 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49895	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:35 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:35 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 51b44b3a-601e-0097-5627-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055935Z-17fbfdc98bbqc8zsbguzmabx6800000006s0000000004441 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:35 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49891	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 05:59:35 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 05:59:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 05:59:35 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: ae8fe88e-901e-005b-2456-232005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T055935Z-17fbfdc98bb6j78ntkx6e2fx4c00000006r000000000579v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 05:59:35 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3592, Parent PID: 1892

General

Target ID:	0
Start time:	01:58:07
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3608, Parent PID: 3592

General

Target ID:	2
Start time:	01:58:09
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,919278412284363896,16631355805893263955,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6340, Parent PID: 1892

General

Target ID:	3
Start time:	01:58:12
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sVCMJVwfRcB6tXSsKkfqWw5xdCxBaAGT6XJhp46wpdP-2B5jHjivpZxzYsrSRXA5-2FY-2B8UvWir66G9dE176cw1g-2BPqKVkkh9E5WeWJPLCBn1l8H8WPwQ1UzgOnlb4X9-2BDO4tMqlo8ADTgxcxXqZxIy"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 40

Chrome Cache Entry: 41

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3592, Parent PID: 1892

General

Chronological Activities

Analysis Process: chrome.exePID: 3608, Parent PID: 3592

General

Chronological Activities

Analysis Process: chrome.exePID: 6340, Parent PID: 1892

General

Chronological Activities

Disassembly