Edit tour

Windows Analysis Report
https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sWUY9cLBSkLNl0QOsQhRSi1zvMya46X7tlLUJv10eDr6e03Gt94WaE45RxiQNsUhLUvBlQvstz4lsFTpt1iHgyHMLb-2FULH-2BKG4s6J1Dm42fxw0-2BXth-2Fbrjs6t8h42i9p23

Overview

General Information

Sample URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sWUY9cLBSkLNl0QOsQhRSi1zvMya46X7tlLUJv
Analysis ID:	1540825
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1996,i,15453027226570084546,1880742390870262341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sWUY9cLBSkLNl0QOsQhRSi1zvMya46X7tlLUJv10eDr6e03Gt94WaE45RxiQNsUhLUvBlQvstz4lsFTpt1iHgyHMLb-2FULH-2BKG4s6J1Dm42fxw0-2BXth-2Fbrjs6t8h42i9p23xHaMeYHZZZLgXq3tV0yWAr7uV_b-2BTvzGoCot69w5CrUH-2FS1Y-2FtHpOqUe5Tde2CA1VIo0PHMLtBpwTjW-2B3ez0JDqpgulOBb-2BAC2rARvB9iGHIXFa5RZcTUQZFc35R8ql2TehP86yFFkCp-2BUUvhzPKc1Rzj8vg-2FlIpu1mzlzKpkUzgADQW83F-2BkmamLFxD3pBB5Y8fb5amltgfONUEqq1D4KdoPzgZ2pvl10nd2KoyH1CRTES7zIMtWSl1JBBk2B-2BsK9izcDP-2BHogj9IAOv3d44PsqiC2Z5JkoOO5oY2M-2BqtYFUyqBmomEzUYHRW9Kymc47UQnRGLtUFGuvEzuyEewpJBzb0JiWUpzVX9Ku7zPRnHAWIIA-3D-3D" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://event.on24.com/eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3D

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: email.sg.on24event.com to https://event.on24.com/eventregistration/eventcalendarservlet.ics?token=r9cowdudo1lvotyxwjatzs%2bmh5c45hww3nqnqj4k0dmh94ykuhm%2bstsbnsup1ipiufxyd%2fwxshmr5w7wjznaha%3d%3d

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sWUY9cLBSkLNl0QOsQhRSi1zvMya46X7tlLUJv10eDr6e03Gt94WaE45RxiQNsUhLUvBlQvstz4lsFTpt1iHgyHMLb-2FULH-2BKG4s6J1Dm42fxw0-2BXth-2Fbrjs6t8h42i9p23xHaMeYHZZZLgXq3tV0yWAr7uV_b-2BTvzGoCot69w5CrUH-2FS1Y-2FtHpOqUe5Tde2CA1VIo0PHMLtBpwTjW-2B3ez0JDqpgulOBb-2BAC2rARvB9iGHIXFa5RZcTUQZFc35R8ql2TehP86yFFkCp-2BUUvhzPKc1Rzj8vg-2FlIpu1mzlzKpkUzgADQW83F-2BkmamLFxD3pBB5Y8fb5amltgfONUEqq1D4KdoPzgZ2pvl10nd2KoyH1CRTES7zIMtWSl1JBBk2B-2BsK9izcDP-2BHogj9IAOv3d44PsqiC2Z5JkoOO5oY2M-2BqtYFUyqBmomEzUYHRW9Kymc47UQnRGLtUFGuvEzuyEewpJBzb0JiWUpzVX9Ku7zPRnHAWIIA-3D-3D HTTP/1.1Host: email.sg.on24event.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3D HTTP/1.1Host: event.on24.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: event.on24.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://event.on24.com/eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ON24_Pool=cons5_prd_wl_LNX; TS0af49cbe027=082972b052ab2000458d849e95e4c8af620414676fba873876f4abfd97c1a3b135706c461f891fcd084647ec821130005351976b5bd5ddc74d332da0d4ed12bad5ad60fdf22837f3b2aa20e0626ee8e712e0f990bfda6fd761a28ac99896bd2f
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: event.on24.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ON24_Pool=cons5_prd_wl_LNX; BIGipServereventprd_apache=!07aC5egc3pPnQJweSVii2HqB/dyrq4Cb7vZUM6jLzss7cRuwBmkYOo2UrN2jmVlVplRbofGXrj119troTxSLN4/zTHM6sS1gXGXL6iv9Pc3DoWw7OizfopwEsH/wNyVKvt0k+sMO20eQhfv57wAbfiNFalBn03Q=; TS0af49cbe027=082972b052ab2000f4e8b0b789f52d8f4e1a9159cf5cdd92d40295d1c8988006592a3f84b8732b38083a21a23d113000e14e5391d9b6d4296bf3a043717f602aba47b7c2c57a90d93298085eecb287a344aa767174b5e3482b92f6f55639d5e5
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: email.sg.on24event.com
Source: global traffic	DNS traffic detected: DNS query: event.on24.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/5@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1996,i,15453027226570084546,1880742390870262341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sWUY9cLBSkLNl0QOsQhRSi1zvMya46X7tlLUJv10eDr6e03Gt94WaE45RxiQNsUhLUvBlQvstz4lsFTpt1iHgyHMLb-2FULH-2BKG4s6J1Dm42fxw0-2BXth-2Fbrjs6t8h42i9p23xHaMeYHZZZLgXq3tV0yWAr7uV_b-2BTvzGoCot69w5CrUH-2FS1Y-2FtHpOqUe5Tde2CA1VIo0PHMLtBpwTjW-2B3ez0JDqpgulOBb-2BAC2rARvB9iGHIXFa5RZcTUQZFc35R8ql2TehP86yFFkCp-2BUUvhzPKc1Rzj8vg-2FlIpu1mzlzKpkUzgADQW83F-2BkmamLFxD3pBB5Y8fb5amltgfONUEqq1D4KdoPzgZ2pvl10nd2KoyH1CRTES7zIMtWSl1JBBk2B-2BsK9izcDP-2BHogj9IAOv3d44PsqiC2Z5JkoOO5oY2M-2BqtYFUyqBmomEzUYHRW9Kymc47UQnRGLtUFGuvEzuyEewpJBzb0JiWUpzVX9Ku7zPRnHAWIIA-3D-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1996,i,15453027226570084546,1880742390870262341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://event.on24.com/favicon.ico	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
r-email.sg.on24event.com	199.83.44.68	true	false	unknown
r-event.on24.com	199.83.44.71	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
event.on24.com	unknown	unknown	false	unknown
email.sg.on24event.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://event.on24.com/favicon.ico	false	0%, Virustotal, Browse	unknown
https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sWUY9cLBSkLNl0QOsQhRSi1zvMya46X7tlLUJv10eDr6e03Gt94WaE45RxiQNsUhLUvBlQvstz4lsFTpt1iHgyHMLb-2FULH-2BKG4s6J1Dm42fxw0-2BXth-2Fbrjs6t8h42i9p23xHaMeYHZZZLgXq3tV0yWAr7uV_b-2BTvzGoCot69w5CrUH-2FS1Y-2FtHpOqUe5Tde2CA1VIo0PHMLtBpwTjW-2B3ez0JDqpgulOBb-2BAC2rARvB9iGHIXFa5RZcTUQZFc35R8ql2TehP86yFFkCp-2BUUvhzPKc1Rzj8vg-2FlIpu1mzlzKpkUzgADQW83F-2BkmamLFxD3pBB5Y8fb5amltgfONUEqq1D4KdoPzgZ2pvl10nd2KoyH1CRTES7zIMtWSl1JBBk2B-2BsK9izcDP-2BHogj9IAOv3d44PsqiC2Z5JkoOO5oY2M-2BqtYFUyqBmomEzUYHRW9Kymc47UQnRGLtUFGuvEzuyEewpJBzb0JiWUpzVX9Ku7zPRnHAWIIA-3D-3D	false		unknown
https://event.on24.com/eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3D	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
199.83.44.71	r-event.on24.com	United States	18742	ON24-SACUS	false
199.83.44.68	r-email.sg.on24event.com	United States	18742	ON24-SACUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540825
Start date and time:	2024-10-24 08:24:40 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sWUY9cLBSkLNl0QOsQhRSi1zvMya46X7tlLUJv10eDr6e03Gt94WaE45RxiQNsUhLUvBlQvstz4lsFTpt1iHgyHMLb-2FULH-2BKG4s6J1Dm42fxw0-2BXth-2Fbrjs6t8h42i9p23xHaMeYHZZZLgXq3tV0yWAr7uV_b-2BTvzGoCot69w5CrUH-2FS1Y-2FtHpOqUe5Tde2CA1VIo0PHMLtBpwTjW-2B3ez0JDqpgulOBb-2BAC2rARvB9iGHIXFa5RZcTUQZFc35R8ql2TehP86yFFkCp-2BUUvhzPKc1Rzj8vg-2FlIpu1mzlzKpkUzgADQW83F-2BkmamLFxD3pBB5Y8fb5amltgfONUEqq1D4KdoPzgZ2pvl10nd2KoyH1CRTES7zIMtWSl1JBBk2B-2BsK9izcDP-2BHogj9IAOv3d44PsqiC2Z5JkoOO5oY2M-2BqtYFUyqBmomEzUYHRW9Kymc47UQnRGLtUFGuvEzuyEewpJBzb0JiWUpzVX9Ku7zPRnHAWIIA-3D-3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/5@8/5

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.110, 172.217.16.195, 108.177.15.84, 34.104.35.123, 172.202.163.200, 93.184.221.240, 13.95.31.18, 192.229.221.95, 20.242.39.171, 142.250.185.99
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://event.on24.com/eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3D Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "The requested resource is no longer available at the server and no forwarding address is known. This condition SHOULD be considered permanent. Clients with link editing capabilities SHOULD delete references to the Request-URI after user approval. If the server does not know, or has no facility to determine, whether or not the condition is permanent, the status code 404 (Not Found) SHOULD be used instead. This response is cachable unless indicated otherwise.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: https://event.on24.com/eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3D Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 40

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.212499153364691
Encrypted:	false
SSDEEP:	24:vpb3MS6vLi9yHAJG4+9BzQdeymSdQgapkgbqT:vpoJLi9yH8G1no3mDp+
MD5:	4EAAF322533442A7BEC61B0D8619999F
SHA1:	1BA08B6357930A6C98FE358029D51D7380F5C246
SHA-256:	9480A6181B9AA45EC64B615336B9EF5A970EE640E29D8A6C361B59F474E4E31C
SHA-512:	3CD01BF1625A8E46A1E02679F1B9E878ACC24E9CE715F157519833D6DF1A1D017F8D83ECFEC842F5720FBC3125AD07170CB0733771E19D6D3806B729B442AA13
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/favicon.ico
Preview:	............ .h.......(....... ..... ..........................@0..@0..@0..A1..?/..2!..&...........&...2!..?/..A1..@0..@0..@0..@0..@0..C3..3"..$...OA...x...........w..O@..$...5$..C3..@0..@0..@0..C3..-...6&..................................1 ../...C3..@0..B2../...;..........................................0...3"..B2..=,..(...............u...u..............................$...>/..'...nb..........yn..;..................................cV..*...#...........................VG..#...#...,...~.............."...4$..........~..(.......h[......=-..?/..6&................3"..9(..........}r..1 ..\|q..6%..>...@0..@0..A1..4#..6%..........6%..)...................7&..=-..A1..@0..@0..@0..;+..$...........'...!.............6%..(...C3..@0..@0..B2..3"..:)..-........$...6%..;+..............$.......2!..3"......M>...t..K<......H8..9)..B2..%...fY..............sf..L=..I:..}......pd..G7..[M..1...B2..@0..@1..$...fY.............................%...@0..7'..A1..@0..@0..A1..@0..%...=,..~............N?..%

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.212499153364691
Encrypted:	false
SSDEEP:	24:vpb3MS6vLi9yHAJG4+9BzQdeymSdQgapkgbqT:vpoJLi9yH8G1no3mDp+
MD5:	4EAAF322533442A7BEC61B0D8619999F
SHA1:	1BA08B6357930A6C98FE358029D51D7380F5C246
SHA-256:	9480A6181B9AA45EC64B615336B9EF5A970EE640E29D8A6C361B59F474E4E31C
SHA-512:	3CD01BF1625A8E46A1E02679F1B9E878ACC24E9CE715F157519833D6DF1A1D017F8D83ECFEC842F5720FBC3125AD07170CB0733771E19D6D3806B729B442AA13
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ..........................@0..@0..@0..A1..?/..2!..&...........&...2!..?/..A1..@0..@0..@0..@0..@0..C3..3"..$...OA...x...........w..O@..$...5$..C3..@0..@0..@0..C3..-...6&..................................1 ../...C3..@0..B2../...;..........................................0...3"..B2..=,..(...............u...u..............................$...>/..'...nb..........yn..;..................................cV..*...#...........................VG..#...#...,...~.............."...4$..........~..(.......h[......=-..?/..6&................3"..9(..........}r..1 ..\|q..6%..>...@0..@0..A1..4#..6%..........6%..)...................7&..=-..A1..@0..@0..@0..;+..$...........'...!.............6%..(...C3..@0..@0..B2..3"..:)..-........$...6%..;+..............$.......2!..3"......M>...t..K<......H8..9)..B2..%...fY..............sf..L=..I:..}......pd..G7..[M..1...B2..@0..@1..$...fY.............................%...@0..7'..A1..@0..@0..A1..@0..%...=,..~............N?..%

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1066)
Category:	downloaded
Size (bytes):	1709
Entropy (8bit):	5.201131975752776
Encrypted:	false
SSDEEP:	48:y3YFCNJvptmwUuCpENU7MmmZQbrAppbWhkp7E+:y3yUvptaf9fb0bo+
MD5:	1D540073621AF0B79589CF89E94F8467
SHA1:	B99A8C47BD8C5991B65D1556C6602D566BF9ADA1
SHA-256:	5E07B380494D972BFBA061E9DACC25A983FBE95D0EEF33D3583DEF003F3F2654
SHA-512:	D48F505C92F9B63E2DB273EB92C5A9BA09D05C89A38BC6EA8019C0E037EBE23303C97AA2247EAF809BE90FB575173AD311606A23CE83A9B0ED22BA6C3680A473
Malicious:	false
Reputation:	low
URL:	https://event.on24.com/eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3D
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Draft//EN">.<HTML>.<HEAD>.<TITLE>Error 410--Gone</TITLE>.</HEAD>.<BODY bgcolor="white">.<FONT FACE=Helvetica><BR CLEAR=all>.<TABLE border=0 cellspacing=5><TR><TD><BR CLEAR=all>.<FONT FACE="Helvetica" COLOR="black" SIZE="3"><H2>Error 410--Gone</H2>.</FONT></TD></TR>.</TABLE>.<TABLE border=0 width=100% cellpadding=10><TR><TD VALIGN=top WIDTH=100% BGCOLOR=white><FONT FACE="Courier New"><FONT FACE="Helvetica" SIZE="3"><H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>.</FONT><FONT FACE="Helvetica" SIZE="3"><H4>10.4.11 410 Gone</H4>.</FONT><P><FONT FACE="Courier New">The requested resource is no longer available at the server and no forwarding address is known. This condition SHOULD be considered permanent. Clients with link editing capabilities SHOULD delete references to the Request-URI after user approval. If the server does not know, or has no facility to determine, whether or not the condition is permanent, the status code

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 08:25:35.412365913 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 08:25:37.771392107 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:37.771450043 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:37.771841049 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:37.771869898 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:37.771883011 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:37.772095919 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:37.772113085 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:37.772135019 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:37.772320986 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:37.772341013 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.856829882 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.856854916 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.857264042 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:38.857296944 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.857400894 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:38.857412100 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.858263016 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.858338118 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:38.858728886 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.858788013 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:38.859586000 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:38.859632969 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.859806061 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:38.859890938 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.859920025 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:38.859927893 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.900142908 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:38.900154114 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:38.900182962 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:38.947360992 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:39.071888924 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:39.072335005 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:39.072351933 CEST	443	49735	199.83.44.68	192.168.2.4
Oct 24, 2024 08:25:39.072410107 CEST	49735	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:25:39.088421106 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:39.088507891 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:39.088610888 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:39.088848114 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:39.088886976 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:39.767391920 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:39.767899990 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:39.767921925 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:39.769551992 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:39.769671917 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:39.770690918 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:39.770778894 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:39.770920038 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:39.770931959 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:39.820183992 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.006997108 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.007144928 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.007446051 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.007483959 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.007544041 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.008502960 CEST	49739	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.008544922 CEST	443	49739	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.125365019 CEST	49740	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.125448942 CEST	443	49740	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.125641108 CEST	49740	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.125916958 CEST	49740	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.125962019 CEST	443	49740	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.137221098 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:25:40.137303114 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 24, 2024 08:25:40.137377024 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:25:40.137801886 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:25:40.137836933 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 24, 2024 08:25:40.794151068 CEST	443	49740	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.795834064 CEST	49740	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.795866966 CEST	443	49740	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.797094107 CEST	443	49740	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.799899101 CEST	49740	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.799899101 CEST	49740	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.800020933 CEST	443	49740	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.800174952 CEST	443	49740	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.852369070 CEST	49740	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.964916945 CEST	443	49740	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.965166092 CEST	443	49740	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:40.965365887 CEST	49740	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:40.996865988 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 24, 2024 08:25:41.001071930 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:25:41.001132011 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 24, 2024 08:25:41.002271891 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 24, 2024 08:25:41.002360106 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:25:41.017457008 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:25:41.017693043 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 24, 2024 08:25:41.067987919 CEST	49740	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.067987919 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:25:41.068054914 CEST	443	49740	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.068101883 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 24, 2024 08:25:41.109572887 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.109654903 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.109759092 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.110204935 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.110280991 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.114905119 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:25:41.240571022 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:41.240652084 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:41.240736961 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:41.243117094 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:41.243194103 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:41.792315960 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.792737007 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.792798042 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.794262886 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.794419050 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.794794083 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.794872046 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.794899940 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.794929981 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.849519014 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.849577904 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.896348000 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.956876993 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.957130909 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:41.957377911 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.958276033 CEST	49742	443	192.168.2.4	199.83.44.71
Oct 24, 2024 08:25:41.958338976 CEST	443	49742	199.83.44.71	192.168.2.4
Oct 24, 2024 08:25:42.109000921 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:42.109086037 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:42.112432957 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:42.112462044 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:42.112876892 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:42.153801918 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:42.195415974 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:42.398214102 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:42.398340940 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:42.398344040 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:42.398361921 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:42.398399115 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:42.398408890 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:42.398416042 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:42.437997103 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:42.438034058 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:42.438097000 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:42.438365936 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:42.438379049 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:43.293661118 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:43.295542955 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:43.307852030 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:43.307879925 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:43.308820963 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:43.310749054 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:43.351332903 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:43.554989100 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:43.555237055 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:43.555780888 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:43.555780888 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:43.556519032 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 08:25:43.556535006 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 08:25:50.978744984 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 24, 2024 08:25:50.978892088 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 24, 2024 08:25:50.978951931 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:25:52.553517103 CEST	49741	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:25:52.553580046 CEST	443	49741	142.250.184.196	192.168.2.4
Oct 24, 2024 08:25:52.937820911 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 24, 2024 08:25:52.944293976 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 24, 2024 08:25:52.944365978 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 24, 2024 08:26:23.911473989 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:26:23.911485910 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 08:26:29.216547966 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:29.216662884 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:29.216746092 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:29.217019081 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:29.217052937 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:29.992913008 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:29.992993116 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:29.994524002 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:29.994546890 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:29.995037079 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.002631903 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.047346115 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.240520000 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.240585089 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.240628004 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.240658045 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.240679026 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.240698099 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.240941048 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.259515047 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.259588957 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.259607077 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.259613991 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.259639978 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.259651899 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.359965086 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.360024929 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.360049009 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.360076904 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.360102892 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.360121012 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.377979994 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.378034115 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.378062010 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.378074884 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.378103971 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.378124952 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.379925966 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.379976988 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.380002022 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.380013943 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.380069971 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.380069971 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.478415012 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.478473902 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.478493929 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.478508949 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.478535891 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.478555918 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.479068041 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.479125023 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.479149103 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.479160070 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.479187965 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.479207993 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.496743917 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.496798992 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.496822119 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.496834993 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.496860981 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.496882915 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.497833967 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.497875929 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.497900963 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.497911930 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.497940063 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.497940063 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.497967005 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.597311974 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.597362041 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.597394943 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.597426891 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.597451925 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.597472906 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.597976923 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.598016024 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.598042965 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.598053932 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.598078012 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.598131895 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.615415096 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.615457058 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.615485907 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.615498066 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.615526915 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.615664005 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.616323948 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.616367102 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.616437912 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.616449118 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.616494894 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.616514921 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.616873026 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.616945982 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.616957903 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.616986990 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.616986990 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.617007017 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.617033005 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.656502008 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.656544924 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.656615019 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.656872034 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.656893969 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.659651995 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.659718037 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.659785032 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.660079956 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.660105944 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.660243988 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.660259962 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.660388947 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.660471916 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.660486937 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.662350893 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.662384987 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.662477016 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.662858009 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.662874937 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.663634062 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.663676023 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:30.663731098 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.663892984 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:30.663902044 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.420274973 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.421215057 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.421215057 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.421237946 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.421257973 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.424850941 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.425262928 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.425312042 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.425606012 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.425618887 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.443742990 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.444436073 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.444436073 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.444443941 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.444463015 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.449146032 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.449482918 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.449517012 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.450112104 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.450130939 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.450315952 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.451031923 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.451031923 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.451061010 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.451072931 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.561472893 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.561523914 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.561650991 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.561688900 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.561851978 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.561851978 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.561950922 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.561964989 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.562275887 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.562325001 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.562449932 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.562493086 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.562597990 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.562741995 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.562741995 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.562778950 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.562791109 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.565215111 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.565215111 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.565246105 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.565253973 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.565368891 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.565373898 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.565527916 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.565546989 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.565634966 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.565663099 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.583772898 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.584151983 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.584801912 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.584853888 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.584853888 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.584863901 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.584875107 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.590321064 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.590373993 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.590497017 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.590529919 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.590605974 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.590739965 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.590775967 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.590775967 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.590791941 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.590804100 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.590821028 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.590828896 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.590977907 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.591011047 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.591182947 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.591221094 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.591254950 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.591317892 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.591326952 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.591352940 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.591357946 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.593296051 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.593307972 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.593317032 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.593388081 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.593496084 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.593497992 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.593590975 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.593604088 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:31.593771935 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:31.593811035 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.327267885 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.327800989 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.327858925 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.328682899 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.328697920 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.332577944 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.333153963 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.333172083 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.333868027 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.333875895 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.360057116 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.360511065 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.360588074 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.361150026 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.361165047 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.364037991 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.364747047 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.364762068 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.365387917 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.365398884 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.367235899 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.367810011 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.367866993 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.368628025 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.368640900 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.464600086 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.464788914 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.464894056 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.465226889 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.465264082 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.465291023 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.465306044 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.469113111 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.469170094 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.469302893 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.469436884 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.469464064 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.472207069 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.472448111 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.472537041 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.472632885 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.472632885 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.472655058 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.472661972 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.475866079 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.475956917 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.476044893 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.476314068 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.476349115 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.498770952 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.498954058 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.500297070 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.500463963 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.500463963 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.500505924 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.500535965 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.503124952 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.503392935 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.503509998 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.503531933 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.503544092 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.503691912 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.503705025 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.503706932 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.504573107 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.504595995 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.506365061 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.506397963 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.506495953 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.506805897 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.506849051 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.509022951 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.509242058 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.509463072 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.509463072 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.509463072 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.513277054 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.513314962 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.513659000 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.513726950 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.513740063 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:32.817698002 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:32.817758083 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.230182886 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.230900049 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.230959892 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.231787920 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.231802940 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.243299007 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.243738890 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.243812084 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.244342089 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.244355917 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.256931067 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.257834911 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.257879019 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.258889914 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.258898020 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.269167900 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.269601107 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.269614935 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.269619942 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.270474911 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.270481110 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.273833036 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.273844004 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.274487972 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.274496078 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.367098093 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.367274046 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.367429972 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.367760897 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.367760897 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.367826939 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.367861986 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.371732950 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.371824980 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.371906042 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.372143030 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.372178078 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.382083893 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.382364035 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.382554054 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.382659912 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.382659912 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.382704973 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.382734060 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.390300989 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.390336037 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.390382051 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.390646935 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.390665054 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.391560078 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.391771078 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.391958952 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.392026901 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.392045975 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.392262936 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.392293930 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.394629955 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.394670963 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.394752979 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.394850969 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.394865036 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.405086994 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.405306101 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.405487061 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.405487061 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.405487061 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.408222914 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.408535957 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.408595085 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.408642054 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.408647060 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.408668041 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.408703089 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.412316084 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.412347078 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.412432909 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.412715912 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.412733078 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.412738085 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.412770987 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.412822008 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.413126945 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.413146973 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:33.708333015 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:33.708399057 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.133354902 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.133757114 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.133819103 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.134216070 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.134228945 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.158735037 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.158762932 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.159390926 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.159421921 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.159739017 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.159746885 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.159822941 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.159854889 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.160312891 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.160326004 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.172003984 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.172415972 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.172435999 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.172821999 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.172827959 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.173949003 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.174309969 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.174326897 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.174623013 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.174631119 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.275952101 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.276242971 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.276324034 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.276376009 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.276376009 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.276396990 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.276408911 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.278723955 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.278808117 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.278911114 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.279002905 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.279021025 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.295561075 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.295613050 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.295717955 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.295744896 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.295753002 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.295767069 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.295773029 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.295936108 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.296267033 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.296315908 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.296380043 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.296396017 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.296466112 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.296473980 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.297986984 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.298011065 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.298219919 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.298331976 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.298341990 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.299015045 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.299097061 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.299177885 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.299298048 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.299316883 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.310548067 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.310740948 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.310801983 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.310856104 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.310894012 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.310906887 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.310921907 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.310926914 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.311008930 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.311058998 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.311136007 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.311136007 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.311146021 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.311157942 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.313074112 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.313097954 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.313200951 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.313210964 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.313287020 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.313317060 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.313323975 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:34.313350916 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.313476086 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:34.313515902 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.032167912 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.032855988 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.032917023 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.033684015 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.033735037 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.067840099 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.068325996 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.068356037 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.068984985 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.068993092 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.069736958 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.070239067 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.070251942 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.071233034 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.071239948 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.079808950 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.080370903 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.080456972 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.081064939 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.081116915 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.084824085 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.085186005 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.085206032 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.086033106 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.086039066 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.182955027 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.183093071 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.183233023 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.183407068 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.183456898 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.183487892 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.183504105 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.187325001 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.187365055 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.187551975 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.187724113 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.187738895 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.204727888 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.205177069 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.205224991 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.205286980 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.205296040 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.205308914 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.205321074 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.208038092 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.208118916 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.208193064 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.208210945 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.208256006 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.208292961 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.209444046 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.209459066 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.209661007 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.209702015 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.212460995 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.212543011 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.212904930 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.213016987 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.213044882 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.221792936 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.221961975 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.222166061 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.222166061 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.222166061 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.223455906 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.223606110 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.223670959 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.223771095 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.223799944 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.223826885 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.223839998 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.223979950 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.223994970 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.224052906 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.224132061 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.224150896 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.225640059 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.225722075 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.225789070 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.225918055 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.225941896 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.536324024 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.536382914 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.950835943 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.951364994 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.951391935 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.951827049 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.951833010 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.966667891 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.967025042 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.967082977 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.967417955 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.967430115 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.971569061 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.971911907 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.971940994 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.972302914 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.972317934 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.982749939 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.983033895 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.983057022 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.983464956 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.983473063 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.985249043 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.985538006 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.985558033 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:35.985913992 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:35.985924006 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.088063955 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.088306904 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.088378906 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.088433981 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.088450909 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.088465929 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.088471889 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.091089964 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.091120958 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.091188908 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.091305017 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.091322899 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.104296923 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.104497910 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.104557991 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.104598045 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.104598045 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.104619026 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.104636908 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.106498957 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.106580019 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.106667042 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.106786966 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.106812954 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.109057903 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.109205008 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.109339952 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.109388113 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.109388113 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.109414101 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.109438896 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.111283064 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.111306906 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.111367941 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.111473083 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.111491919 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.119129896 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.119213104 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.119296074 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.119337082 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.119355917 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.119369030 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.119378090 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.121298075 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.121324062 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.121392965 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.121442080 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.121510983 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.121536970 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.121709108 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.121798038 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.121839046 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.121856928 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.121880054 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.121892929 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.123708010 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.123754025 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.123821020 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.123956919 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.123975039 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.851011992 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.851548910 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.851571083 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.852166891 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.852179050 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.867100954 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.867415905 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.867475033 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.867916107 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.867928982 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.872853041 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.873131990 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.873148918 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.873594999 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.873603106 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.883764982 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.884241104 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.884274006 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.884598970 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.884625912 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.892287016 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.892827988 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.892920971 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.893112898 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.893130064 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.989125013 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.989244938 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.989456892 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.989511967 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.989531040 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.989545107 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.989552021 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.992446899 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.992535114 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:36.992604971 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.992774963 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:36.992798090 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.006221056 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.006316900 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.006391048 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.006465912 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.006510973 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.006526947 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.006542921 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.008872032 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.008914948 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.008976936 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.009238958 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.009280920 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.010485888 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.010634899 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.010713100 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.010762930 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.010762930 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.010776043 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.010787964 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.012696981 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.012722015 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.012787104 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.012875080 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.012886047 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.020292044 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.020878077 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.021034002 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.021034002 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.021034002 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.022929907 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.022969007 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.023017883 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.023114920 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.023124933 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.031754017 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.031896114 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.032202959 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.032202959 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.032202959 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.034495115 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.034575939 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.034655094 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.034914970 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.034992933 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.333276033 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.333304882 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.333338022 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.333398104 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.767014980 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.767400980 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.767421007 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.767838955 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.767846107 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.770169973 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.770750999 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.770787001 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.771222115 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.771234035 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.786397934 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.786989927 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.787023067 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.787591934 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.787602901 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.787760973 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.788162947 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.788218975 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.788671970 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.788691044 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.792273045 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.792646885 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.792685032 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.793149948 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.793158054 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.906307936 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.906680107 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.906733990 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.906764984 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.906780958 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.906793118 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.906800032 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.908972025 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.909185886 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.909270048 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.909496069 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.909523010 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.909559011 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.909559011 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.909585953 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.909605026 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.909632921 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.909794092 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.909806967 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.911928892 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.911983013 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.912079096 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.912206888 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.912236929 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.924046993 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.924283981 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.924341917 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.924381971 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.924405098 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.924428940 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.924441099 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.924438953 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.925020933 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.925136089 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.925247908 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.925249100 CEST	49791	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.925265074 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.925283909 CEST	443	49791	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.927474022 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.927501917 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.927552938 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.927676916 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.927694082 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.927885056 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.927931070 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.928081989 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.928189039 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.928216934 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.934171915 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.934317112 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.934376955 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.934415102 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.934420109 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.934428930 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.934432983 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.936628103 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.936649084 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:37.936705112 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.936830997 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:37.936846018 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.675386906 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.675878048 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.675894022 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.676474094 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.676477909 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.680695057 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.681011915 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.681061983 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.681451082 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.681464911 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.689702988 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.690000057 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.690028906 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.690377951 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.690387011 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.693347931 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.693738937 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.693795919 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.694252014 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.694263935 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.703212976 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.703697920 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.703712940 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.704157114 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.704164028 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.814778090 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.814956903 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.815025091 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.819463015 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.819612026 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.819725990 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.825731039 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.825736046 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.826666117 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.826828957 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.827033043 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.828264952 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.828279972 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.828368902 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.828376055 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.830640078 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.830671072 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.831572056 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.831729889 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.831795931 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.832461119 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.832461119 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.832499981 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.832525015 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.840432882 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.840662003 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.840759993 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.841975927 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.842025042 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.842200994 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.843099117 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.843120098 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.843197107 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.843966007 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.843977928 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.845310926 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.845343113 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.845623016 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.845635891 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.846581936 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.846647024 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.846709013 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.846977949 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.846999884 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.849162102 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.849169016 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.849363089 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.850200891 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.850234985 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.850333929 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.850960016 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.850989103 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:38.852447033 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:38.852457047 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.593287945 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.593940973 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.593961000 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.595060110 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.595065117 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.610196114 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.610744953 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.610786915 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.611365080 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.611381054 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.619525909 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.620033026 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.620049953 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.620878935 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.620883942 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.621239901 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.621730089 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.621786118 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.622538090 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.622554064 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.627527952 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.627859116 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.627896070 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.628381014 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.628391981 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.730380058 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.730536938 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.730643988 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.730691910 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.730701923 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.730735064 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.730740070 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.733036995 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.733082056 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.733165979 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.733375072 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.733414888 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.748044014 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.748280048 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.748377085 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.748449087 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.748449087 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.748478889 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.748502970 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.751221895 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.751261950 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.751364946 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.751481056 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.751496077 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.756803036 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.757148981 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.757194996 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.757219076 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.757231951 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.757242918 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.757247925 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.758857965 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.758938074 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.759026051 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.759119987 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.759143114 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.761610985 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.761743069 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.762486935 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.762631893 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.762676001 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.762703896 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.762720108 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.764513969 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.764529943 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.764611006 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.764746904 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.764760971 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.765815020 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.766060114 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.766124964 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.766304016 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.766304016 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.766330957 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.766354084 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.767720938 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.767762899 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:39.767848969 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.767951012 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:39.767966986 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.180900097 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:26:40.181109905 CEST	443	49736	199.83.44.68	192.168.2.4
Oct 24, 2024 08:26:40.181180954 CEST	49736	443	192.168.2.4	199.83.44.68
Oct 24, 2024 08:26:40.181545973 CEST	49809	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:26:40.181627035 CEST	443	49809	142.250.184.196	192.168.2.4
Oct 24, 2024 08:26:40.181726933 CEST	49809	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:26:40.182271004 CEST	49809	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:26:40.182308912 CEST	443	49809	142.250.184.196	192.168.2.4
Oct 24, 2024 08:26:40.495274067 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.496099949 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.496186018 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.497096062 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.497112036 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.512870073 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.522710085 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.525010109 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.525024891 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.525707006 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.525713921 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.526307106 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.526323080 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.527060032 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.527065992 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.527137995 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.527801037 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.527859926 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.528343916 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.528357983 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.531677008 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.532043934 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.532063961 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.532610893 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.532624960 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.632803917 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.632966995 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.633338928 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.633339882 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.633339882 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.636266947 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.636358976 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.636468887 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.636778116 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.636815071 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.657390118 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.657547951 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.657620907 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.657830954 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.657856941 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.657876015 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.657883883 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.662307024 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.662328005 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.662437916 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.662460089 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.662594080 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.662683964 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.662683964 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.662751913 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.662758112 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.663590908 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.663603067 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.665508986 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.665527105 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.665877104 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.665877104 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.665901899 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.667932034 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.681823015 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.682004929 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.682087898 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.682089090 CEST	49806	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.682127953 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.682130098 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.682158947 CEST	443	49806	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.682239056 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.682296991 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.682471037 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.682498932 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.682529926 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.682545900 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.686111927 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.686156988 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.686296940 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.686476946 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.686511993 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.687716961 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.687728882 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.687875986 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.687988043 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.687998056 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:40.942075968 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:40.942135096 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.033782005 CEST	443	49809	142.250.184.196	192.168.2.4
Oct 24, 2024 08:26:41.034210920 CEST	49809	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:26:41.034272909 CEST	443	49809	142.250.184.196	192.168.2.4
Oct 24, 2024 08:26:41.034982920 CEST	443	49809	142.250.184.196	192.168.2.4
Oct 24, 2024 08:26:41.035326004 CEST	49809	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:26:41.035419941 CEST	443	49809	142.250.184.196	192.168.2.4
Oct 24, 2024 08:26:41.082482100 CEST	49809	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:26:41.397716045 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.398694992 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.398744106 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.399395943 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.399410009 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.426875114 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.427166939 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.427187920 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.427690029 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.427695990 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.444180965 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.444808006 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.444817066 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.445358038 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.445453882 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.445458889 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.445700884 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.445722103 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.446440935 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.446446896 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.462146997 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.462543964 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.462603092 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.463253975 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.463305950 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.534293890 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.534650087 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.534735918 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.534816027 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.534816027 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.534859896 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.534902096 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.560446024 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.560513020 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.560586929 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.561275959 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.561315060 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.562715054 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.562892914 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.562989950 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.563121080 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.563121080 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.563148975 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.563160896 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.566386938 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.566456079 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.567558050 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.568378925 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.568409920 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.581118107 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.581312895 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.581415892 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.581497908 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.581497908 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.581506968 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.581517935 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.584686041 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.584709883 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.584877968 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.585011959 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.585021973 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.585252047 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.585412025 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.585468054 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.585608959 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.585618019 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.585635900 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.585639000 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.590089083 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.590186119 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.590265036 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.590576887 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.590610981 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.602288961 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.602471113 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.602531910 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.602650881 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.602677107 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.602699995 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.602713108 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.605802059 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.605809927 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.605973959 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.606148005 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:41.606157064 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:41.787499905 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 24, 2024 08:26:41.793313980 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 24, 2024 08:26:41.793391943 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 24, 2024 08:26:42.330074072 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.330653906 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.330688953 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.331456900 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.331603050 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.331617117 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.332173109 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.332231998 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.332624912 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.332638979 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.347688913 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.348037004 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.348058939 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.348503113 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.348507881 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.358772993 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.359077930 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.359098911 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.359421968 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.359432936 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.364351988 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.364629984 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.364635944 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.364963055 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.364968061 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.465735912 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.465872049 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.465943098 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.465991020 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.465991974 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.466026068 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.466051102 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.468429089 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.468442917 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.468533039 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.468609095 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.468666077 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.468724966 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.468744993 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.468837976 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.468838930 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.468838930 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.470576048 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.470603943 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.470668077 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.470773935 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.470784903 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.485372066 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.485532045 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.485589981 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.485608101 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.485615969 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.485626936 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.485630989 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.487391949 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.487417936 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.487483025 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.487621069 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.487644911 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.496918917 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.497086048 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.497149944 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.497189045 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.497189045 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.497206926 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.497227907 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.498970032 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.498979092 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.499031067 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.499155998 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.499166012 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.506546021 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.506730080 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.506779909 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.506805897 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.506809950 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.506818056 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.506820917 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.508599043 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.508661985 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.508734941 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.508857965 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.508888006 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:42.770291090 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:42.770349979 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.231451035 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.232007980 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.232023001 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.232481003 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.232486010 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.243902922 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.244261026 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.244312048 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.244602919 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.244615078 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.253484011 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.253766060 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.253781080 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.254065037 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.254089117 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.255950928 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.256185055 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.256192923 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.256485939 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.256490946 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.287256002 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.287610054 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.287656069 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.288055897 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.288069010 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.368685961 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.368846893 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.368902922 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.368952990 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.368963003 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.368973017 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.368977070 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.371221066 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.371243954 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.371347904 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.371474028 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.371481895 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.383758068 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.383902073 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.383963108 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.384033918 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.384035110 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.384064913 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.384092093 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.385742903 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.385802031 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.385874987 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.385972977 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.386004925 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.393368959 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.393515110 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.393635035 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.393670082 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.393670082 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.393685102 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.393703938 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.394002914 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.394272089 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.394345999 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.394366026 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.394375086 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.394387007 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.394390106 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.395602942 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.395612955 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.395818949 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.395962000 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.395972013 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.395989895 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.396020889 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.396126986 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.396250010 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.396269083 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.426780939 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.427000046 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.427062988 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.427117109 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.427117109 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.427151918 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.427174091 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.428847075 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.428926945 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:43.428992987 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.429141045 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:43.429193020 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.306451082 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.307424068 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.307425022 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.307513952 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.307547092 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.308732986 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.309286118 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.309286118 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.309303999 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.309313059 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.313482046 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.313657045 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.314057112 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.314057112 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.314080000 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.314089060 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.314241886 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.314507008 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.314534903 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.314565897 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.314572096 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.314865112 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.314870119 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.315032959 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.315043926 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.444793940 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.445060015 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.445468903 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.445468903 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.445468903 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.447504997 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.447530031 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.449172974 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.449244976 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.449271917 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.449354887 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.449409962 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.449409962 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.449417114 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.449424028 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.449503899 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.449512959 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.450325966 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.450592995 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.450630903 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.450670958 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.451004028 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.451014996 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.451044083 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.451045990 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.451047897 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.451162100 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.451162100 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.451358080 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.451381922 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.451519012 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.451581955 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.451821089 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.451994896 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.452028990 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.453047037 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.453233957 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.453264952 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.453296900 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.453361988 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.453363895 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.453564882 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.453568935 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.453577042 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.453597069 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.453600883 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.453650951 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.453859091 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.453876972 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.453910112 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.454304934 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.454339981 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.455357075 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.455367088 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.455595970 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.455735922 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.455749035 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:44.754754066 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:44.754815102 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.202580929 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.203144073 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.203228951 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.203422070 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.203437090 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.204679012 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.205183983 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.205193996 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.205408096 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.205413103 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.216034889 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.216308117 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.216357946 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.216598988 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.216614962 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.219177008 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.219299078 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.219567060 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.219631910 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.219700098 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.219717979 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.219930887 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.219943047 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.219996929 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.220006943 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.338170052 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.338332891 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.338519096 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.338620901 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.338620901 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.338661909 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.338691950 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.341123104 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.341202974 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.341300964 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.341464996 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.341490030 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.342925072 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.342941046 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.342989922 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.342993021 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.343187094 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.343187094 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.343187094 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.345114946 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.345206022 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.345308065 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.345468998 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.345508099 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356134892 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356193066 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356271982 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356336117 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356359959 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356379986 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356420994 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356426001 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356456995 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356492996 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356493950 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356517076 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356524944 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356551886 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356565952 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356601954 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356652975 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356652975 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356703997 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356729031 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356749058 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356753111 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356901884 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.356971025 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356971025 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.356971025 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.358863115 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.358891010 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.359086037 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.359172106 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.359210014 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.359217882 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.359252930 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.359292030 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.359299898 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.359333992 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.359343052 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.359411955 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.359443903 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.359472990 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.359486103 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.645184994 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.645198107 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:45.660820007 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:45.660849094 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.806334019 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.806723118 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.806770086 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.807271957 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.807284117 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.813611031 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.813918114 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.813947916 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.814307928 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.814318895 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.815089941 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.815392017 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.815417051 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.815746069 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.815751076 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.817250967 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.817610025 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.817617893 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.817866087 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.817902088 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.817905903 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.818186045 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.818243027 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.818589926 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.818603039 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.947101116 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.947297096 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.947360039 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.947422028 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.947422028 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.947458982 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.947482109 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.949980974 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.950041056 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.950119972 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.950282097 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.950299978 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.953483105 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.953672886 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.953735113 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.953775883 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.953775883 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.953790903 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.953809977 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.954603910 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.954751015 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.954802036 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.954826117 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.954837084 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.955872059 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.955950022 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.956020117 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.956058025 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.956110001 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.956132889 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.956221104 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.956269026 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.956332922 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.956332922 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.956337929 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.956343889 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.956520081 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.956576109 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.956692934 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.956748962 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.957009077 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.957042933 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.957144022 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.957165956 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.957222939 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.957242012 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.957304955 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.957494020 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.957516909 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.958353043 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.958375931 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.958444118 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.958595037 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.958616018 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.958873034 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.958892107 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:46.958946943 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.959080935 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:46.959090948 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.708714962 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.709253073 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.709311962 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.709810972 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.709825993 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.715275049 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.715703964 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.715795040 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.716309071 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.716434002 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.716450930 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.716890097 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.716955900 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.717462063 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.717480898 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.718343973 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.718882084 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.718940973 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.719448090 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.719464064 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.722368002 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.738818884 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.738854885 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.739550114 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.739562035 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.847029924 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.847167969 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.847346067 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.847428083 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.847428083 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.847467899 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.847500086 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.850650072 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.850724936 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.850841045 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.851088047 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.851135015 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.851720095 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.851794004 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.851914883 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.852154016 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.852154016 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.852189064 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.852211952 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.853964090 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.854110956 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.854193926 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.854964018 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.855005980 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.855088949 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.855256081 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.855290890 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.855339050 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.855354071 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.855496883 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.855634928 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.855665922 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.855676889 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.855736017 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.856904030 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.856904030 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.856920958 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.856941938 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.859563112 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.859585047 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.859661102 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.860301971 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.860327005 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.861855984 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.861884117 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.862032890 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.862057924 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.862063885 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.873572111 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.873718023 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.873934031 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.874141932 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.874141932 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.874159098 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.874180079 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.876535892 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.876601934 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:47.876671076 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.877007008 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:47.877028942 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.618730068 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.619880915 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.619913101 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.620541096 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.620553017 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.621561050 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.622128963 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.622188091 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.622523069 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.622699976 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.622714996 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.623255014 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.623270988 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.623743057 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.623753071 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.627563953 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.627883911 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.627906084 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.628417969 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.628422022 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.632576942 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.633049965 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.633070946 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.633443117 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.633450031 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.760174036 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.760195017 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.760386944 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.760457993 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.760500908 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.760584116 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.760592937 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.760658979 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.760782957 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.760816097 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.760848045 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.761007071 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.765789032 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.765856028 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.765909910 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.765919924 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.765960932 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.766302109 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.770349979 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.770493031 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.770564079 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.771964073 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.771995068 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.772109985 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.772129059 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.773430109 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.773442030 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.773570061 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.773602009 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.773634911 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.773650885 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.777584076 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.777584076 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.777601957 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.777622938 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.779179096 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.779179096 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.779215097 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.779239893 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.782944918 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.782964945 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.783020020 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.785384893 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.785434961 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.785615921 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.786111116 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.786199093 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.786278009 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.787357092 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.787391901 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.787502050 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.788119078 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.788141012 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.788235903 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.788245916 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.788357019 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.788384914 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.788388968 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.788420916 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.789454937 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.789477110 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:48.789561987 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.789787054 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:48.789812088 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.537904978 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.538379908 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.538456917 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.538960934 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.538975000 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.550168037 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.550606012 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.550630093 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.551047087 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.551052094 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.552256107 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.552651882 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.552691936 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.553107977 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.553119898 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.556236982 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.556500912 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.556512117 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.557060003 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.557065010 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.562890053 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.563234091 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.563250065 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.563663006 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.563673973 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.671586037 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.671742916 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.671813965 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.671857119 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.671890020 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.671912909 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.671927929 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.674202919 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.674232006 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.674283028 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.674391985 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.674410105 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.688647985 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.688796997 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.688858986 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.688877106 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.688893080 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.688903093 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.688906908 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.690210104 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.690310955 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.690360069 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.690491915 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.690555096 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.690582037 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.690613031 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.690629005 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.690809011 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.690817118 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.690896988 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.690983057 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.690989971 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.692425966 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.692466021 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.692538977 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.692661047 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.692684889 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.696891069 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.696954012 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.697047949 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.697125912 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.697137117 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.697145939 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.697150946 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.699078083 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.699085951 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.699150085 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.699240923 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.699251890 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.703464031 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.703627110 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.703797102 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.703831911 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.703831911 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.703849077 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.703867912 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.705518961 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.705538988 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:49.705697060 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.705852032 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:49.705876112 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.444612026 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.445045948 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.445046902 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.445064068 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.445460081 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.445463896 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.445523024 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.445534945 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.446068048 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.446072102 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.452550888 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.452840090 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.452864885 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.453154087 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.453165054 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.461915016 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.462220907 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.462228060 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.462551117 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.462553978 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.463521957 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.463795900 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.463810921 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.464123011 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.464132071 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.579412937 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.579720974 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.579830885 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.579864025 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.579900980 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.579951048 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.579965115 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.579973936 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.579978943 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.582531929 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.582602978 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.582748890 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.582866907 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.582885027 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.587718010 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.587857008 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.587919950 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.587990046 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.587994099 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.588012934 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.588016987 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.589893103 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.590035915 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.590066910 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.590095997 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.590162039 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.590219021 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.590219021 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.590219021 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.590312958 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.590323925 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.592103004 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.592152119 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.592288971 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.592421055 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.592449903 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.599378109 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.599487066 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.599540949 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.599546909 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.599590063 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.599622965 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.599630117 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.599638939 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.599642992 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.599649906 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.599652052 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.601226091 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.601233959 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.601393938 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.601516962 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.601526976 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.601557970 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.601727009 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.601799965 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.601841927 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.601841927 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.601883888 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.601911068 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.603472948 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.603559017 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.603624105 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.603713989 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.603738070 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:50.891855955 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:50.891916037 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.029576063 CEST	443	49809	142.250.184.196	192.168.2.4
Oct 24, 2024 08:26:51.029728889 CEST	443	49809	142.250.184.196	192.168.2.4
Oct 24, 2024 08:26:51.029911995 CEST	49809	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:26:51.335022926 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.335583925 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.335666895 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.335874081 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.335889101 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.351830006 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.352174044 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.352195024 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.352531910 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.352541924 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.376501083 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.376786947 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.376800060 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.377072096 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.377078056 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.377300978 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.377607107 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.377660990 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.378165007 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.378180981 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.379949093 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.380323887 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.380330086 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.380855083 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.380858898 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.470501900 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.470660925 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.470747948 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.470843077 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.470843077 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.470882893 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.470911980 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.473474026 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.473555088 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.473654032 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.473758936 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.473778963 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.498716116 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.498788118 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.498878002 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.498876095 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.498954058 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.499003887 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.499003887 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.499034882 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.499058962 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.501045942 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.501127958 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.501226902 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.501343012 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.501374006 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.516612053 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.516752958 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.516776085 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.516905069 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.516913891 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.516958952 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.516958952 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.516982079 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.517003059 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.517003059 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.517165899 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.517165899 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.517180920 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.517189026 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.519028902 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.519200087 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.519268036 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.519692898 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.519773960 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.519886017 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.519901991 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.519901991 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.519906998 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.519913912 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.519944906 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.520024061 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.520070076 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.520097017 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.520103931 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.520176888 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.520201921 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.522177935 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.522208929 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:51.522293091 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.522416115 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:51.522433996 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.242029905 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.242402077 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.242444992 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.242794991 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.242813110 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.265175104 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.265594006 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.265677929 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.265841961 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.265856981 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.288888931 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.289179087 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.289216995 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.289552927 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.289563894 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.291707993 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.291970968 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.291996956 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.292267084 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.292273998 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.294533014 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.294828892 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.294869900 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.295123100 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.295142889 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.379966021 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.380739927 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.380815983 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.380911112 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.380911112 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.380954027 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.380987883 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.383008003 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.383070946 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.383197069 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.383333921 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.383348942 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.403449059 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.403517962 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.403620958 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.403785944 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.403786898 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.403786898 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.403786898 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.405685902 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.405714989 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.405810118 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.405932903 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.405953884 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.425331116 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.425467968 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.425560951 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.425614119 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.425614119 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.425632000 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.425669909 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.427299976 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.427356958 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.427556038 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.427612066 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.427628994 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.432431936 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.432542086 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.432595968 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.432666063 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.432677984 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.432688951 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.432694912 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.434540987 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.434624910 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.434760094 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.434863091 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.434885025 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.436044931 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.436176062 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.436232090 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.436269045 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.436269045 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.436280012 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.436290979 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.437948942 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.437971115 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.438143015 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.438276052 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.438301086 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:52.565000057 CEST	49809	443	192.168.2.4	142.250.184.196
Oct 24, 2024 08:26:52.565026999 CEST	443	49809	142.250.184.196	192.168.2.4
Oct 24, 2024 08:26:52.704389095 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:52.704451084 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.168728113 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.169470072 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.169470072 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.169498920 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.169522047 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.186302900 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.186638117 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.186697960 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.186956882 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.186970949 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.191209078 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.191524029 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.191581011 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.191919088 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.191932917 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.212882042 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.213171005 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.213228941 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.213582039 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.213596106 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.307642937 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.307760000 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.307883978 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.307955027 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.307955027 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.307970047 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.307980061 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.310276031 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.310363054 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.311567068 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.311707020 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.311728001 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.322995901 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.323173046 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.323302031 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.323302984 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.323302984 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.325381994 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.325402021 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.325508118 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.325691938 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.325705051 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.329746962 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.329818010 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.329946041 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.329946041 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.329946041 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.331768990 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.331850052 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.332041025 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.332041025 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.332123041 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.353693008 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.353786945 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.353878021 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.353939056 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.354012012 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.354012012 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.354053020 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.354095936 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.354111910 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.355629921 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.355648041 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.355767012 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.355823040 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.355834961 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.489234924 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.489660025 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.489691019 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.489923954 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.489932060 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.548064947 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.548126936 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.626135111 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.626147032 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.626178026 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.626210928 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.626302004 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.626362085 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.626477957 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.626503944 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.626548052 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.626775026 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.628443003 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.628493071 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:53.628676891 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.628735065 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:53.628747940 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.067846060 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.068232059 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.068262100 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.068695068 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.068701982 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.086364031 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.087428093 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.087771893 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.087830067 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.088207006 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.088222027 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.088967085 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.088994980 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.089301109 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.089308023 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.117109060 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.117425919 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.117455959 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.117799044 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.117806911 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.204011917 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.204174995 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.204279900 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.204591990 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.204639912 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.204668999 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.204685926 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.206921101 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.207001925 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.207145929 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.207262993 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.207297087 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.223881960 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.224021912 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.224195957 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.224195957 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.224195957 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.224790096 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.224922895 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.224977016 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.225006104 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.225029945 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.225058079 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.225081921 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.225095987 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.225102901 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.226906061 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.226938963 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.226991892 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.227080107 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.227097988 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.227258921 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.227305889 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.227375984 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.227487087 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.227518082 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.254652977 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.254715919 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.254765987 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.254796028 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.254817963 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.254859924 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.254882097 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.254883051 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.254895926 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.254909039 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.256855011 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.256887913 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.257044077 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.257190943 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.257205009 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.378160000 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.378724098 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.378761053 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.379225016 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.379237890 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.513453960 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.513607025 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.513848066 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.513848066 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.513848066 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.515655994 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.515686989 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.515762091 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.515865088 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.515885115 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.532489061 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.532550097 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:54.813646078 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:54.813680887 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.181873083 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.182730913 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.182732105 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.182796001 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.182845116 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.188852072 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.189275026 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.189318895 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.189335108 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.189614058 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.189625025 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.189873934 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.189884901 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.190099955 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.190135956 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.190145016 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.190871000 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.190871000 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.190879107 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.190890074 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.322753906 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.322824955 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.322928905 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.323054075 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.323054075 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.323054075 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.325398922 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.325483084 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.325712919 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.325714111 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.325807095 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.326337099 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.326471090 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.326683044 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.326683044 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.326704979 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.326755047 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.326786041 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.326842070 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.327019930 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.327086926 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.327115059 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.327159882 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.327641964 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.327647924 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.327686071 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.327686071 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.327719927 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.327730894 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.328969002 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.328989029 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.329201937 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.329502106 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.329510927 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.329513073 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.329539061 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.329761982 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.330044031 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.330090046 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.330108881 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.330116034 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.330213070 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.330301046 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.330301046 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.330301046 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.330316067 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.330346107 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.330353022 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.332134008 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.332217932 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.332329988 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.332528114 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.332564116 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.464931011 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.465090036 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.465181112 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.465181112 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.465205908 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.465212107 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.467576981 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.467649937 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.467814922 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.467816114 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.467891932 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 24, 2024 08:26:55.626274109 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 24, 2024 08:26:55.626334906 CEST	443	49880	13.107.253.72	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 08:25:36.192753077 CEST	53	58272	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:36.193247080 CEST	53	54771	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:37.658235073 CEST	53	56345	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:37.743232012 CEST	57052	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:25:37.743376017 CEST	61073	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:25:37.765171051 CEST	53	57052	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:38.039370060 CEST	53	61073	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:39.074672937 CEST	51467	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:25:39.074824095 CEST	61876	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:25:39.083573103 CEST	53	51467	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:39.087841988 CEST	53	61876	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:40.128074884 CEST	57482	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:25:40.128295898 CEST	56855	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:25:40.136142015 CEST	53	57482	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:40.136181116 CEST	53	56855	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:41.100265026 CEST	62925	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:25:41.100662947 CEST	52465	53	192.168.2.4	1.1.1.1
Oct 24, 2024 08:25:41.108561039 CEST	53	62925	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:41.108747005 CEST	53	52465	1.1.1.1	192.168.2.4
Oct 24, 2024 08:25:53.385534048 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 08:25:54.762768984 CEST	53	59272	1.1.1.1	192.168.2.4
Oct 24, 2024 08:26:13.697082996 CEST	53	62208	1.1.1.1	192.168.2.4
Oct 24, 2024 08:26:35.781491995 CEST	53	52231	1.1.1.1	192.168.2.4
Oct 24, 2024 08:26:36.062362909 CEST	53	57107	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 08:25:38.040116072 CEST	192.168.2.4	1.1.1.1	c237	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 08:25:37.743232012 CEST	192.168.2.4	1.1.1.1	0x2429	Standard query (0)	email.sg.on24event.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:25:37.743376017 CEST	192.168.2.4	1.1.1.1	0xdaf1	Standard query (0)	email.sg.on24event.com	65	IN (0x0001)	false
Oct 24, 2024 08:25:39.074672937 CEST	192.168.2.4	1.1.1.1	0xc01d	Standard query (0)	event.on24.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:25:39.074824095 CEST	192.168.2.4	1.1.1.1	0x529f	Standard query (0)	event.on24.com	65	IN (0x0001)	false
Oct 24, 2024 08:25:40.128074884 CEST	192.168.2.4	1.1.1.1	0x1c4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:25:40.128295898 CEST	192.168.2.4	1.1.1.1	0x3bfa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 08:25:41.100265026 CEST	192.168.2.4	1.1.1.1	0xbd2f	Standard query (0)	event.on24.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:25:41.100662947 CEST	192.168.2.4	1.1.1.1	0x55b	Standard query (0)	event.on24.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 08:25:37.765171051 CEST	1.1.1.1	192.168.2.4	0x2429	No error (0)	email.sg.on24event.com	r-email.sg.on24event.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:25:37.765171051 CEST	1.1.1.1	192.168.2.4	0x2429	No error (0)	r-email.sg.on24event.com		199.83.44.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:25:38.039370060 CEST	1.1.1.1	192.168.2.4	0xdaf1	No error (0)	email.sg.on24event.com	r-email.sg.on24event.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:25:39.083573103 CEST	1.1.1.1	192.168.2.4	0xc01d	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:25:39.083573103 CEST	1.1.1.1	192.168.2.4	0xc01d	No error (0)	r-event.on24.com		199.83.44.71	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:25:39.087841988 CEST	1.1.1.1	192.168.2.4	0x529f	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:25:40.136142015 CEST	1.1.1.1	192.168.2.4	0x1c4	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:25:40.136181116 CEST	1.1.1.1	192.168.2.4	0x3bfa	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 08:25:41.108561039 CEST	1.1.1.1	192.168.2.4	0xbd2f	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:25:41.108561039 CEST	1.1.1.1	192.168.2.4	0xbd2f	No error (0)	r-event.on24.com		199.83.44.71	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:25:41.108747005 CEST	1.1.1.1	192.168.2.4	0x55b	No error (0)	event.on24.com	r-event.on24.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:25:51.513510942 CEST	1.1.1.1	192.168.2.4	0x4f10	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:25:51.513510942 CEST	1.1.1.1	192.168.2.4	0x4f10	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:26:09.826519966 CEST	1.1.1.1	192.168.2.4	0xbda	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:26:09.826519966 CEST	1.1.1.1	192.168.2.4	0xbda	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:26:28.813180923 CEST	1.1.1.1	192.168.2.4	0x542e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:26:28.813180923 CEST	1.1.1.1	192.168.2.4	0x542e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:26:29.215624094 CEST	1.1.1.1	192.168.2.4	0x83dd	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:26:29.215624094 CEST	1.1.1.1	192.168.2.4	0x83dd	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:26:29.215624094 CEST	1.1.1.1	192.168.2.4	0x83dd	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 24, 2024 08:26:49.197900057 CEST	1.1.1.1	192.168.2.4	0x5bc7	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 08:26:49.197900057 CEST	1.1.1.1	192.168.2.4	0x5bc7	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

email.sg.on24event.com

event.on24.com

https:

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	199.83.44.68	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:25:38 UTC	1330	OUT	GET /ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sWUY9cLBSkLNl0QOsQhRSi1zvMya46X7tlLUJv10eDr6e03Gt94WaE45RxiQNsUhLUvBlQvstz4lsFTpt1iHgyHMLb-2FULH-2BKG4s6J1Dm42fxw0-2BXth-2Fbrjs6t8h42i9p23xHaMeYHZZZLgXq3tV0yWAr7uV_b-2BTvzGoCot69w5CrUH-2FS1Y-2FtHpOqUe5Tde2CA1VIo0PHMLtBpwTjW-2B3ez0JDqpgulOBb-2BAC2rARvB9iGHIXFa5RZcTUQZFc35R8ql2TehP86yFFkCp-2BUUvhzPKc1Rzj8vg-2FlIpu1mzlzKpkUzgADQW83F-2BkmamLFxD3pBB5Y8fb5amltgfONUEqq1D4KdoPzgZ2pvl10nd2KoyH1CRTES7zIMtWSl1JBBk2B-2BsK9izcDP-2BHogj9IAOv3d44PsqiC2Z5JkoOO5oY2M-2BqtYFUyqBmomEzUYHRW9Kymc47UQnRGLtUFGuvEzuyEewpJBzb0JiWUpzVX9Ku7zPRnHAWIIA-3D-3D HTTP/1.1 Host: email.sg.on24event.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:25:39 UTC	369	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 24 Oct 2024 06:25:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 193 Connection: close Location: https://event.on24.com/eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3D X-Robots-Tag: noindex, nofollow
2024-10-24 06:25:39 UTC	193	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 2e 6f 6e 32 34 2e 63 6f 6d 2f 65 76 65 6e 74 52 65 67 69 73 74 72 61 74 69 6f 6e 2f 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 53 65 72 76 6c 65 74 2e 69 63 73 3f 74 6f 6b 65 6e 3d 72 39 43 6f 57 44 55 64 4f 31 6c 56 4f 74 59 58 77 6a 61 54 7a 73 25 32 42 4d 48 35 63 34 35 48 57 77 33 6e 51 4e 71 6a 34 6b 30 44 6d 48 39 34 59 4b 55 68 4d 25 32 42 73 74 53 42 6e 73 55 70 31 49 70 49 75 46 78 59 44 25 32 46 77 78 53 68 4d 72 35 77 37 57 6a 5a 4e 61 68 41 25 33 44 25 33 44 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://event.on24.com/eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3D">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	199.83.44.71	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:25:39 UTC	804	OUT	GET /eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3D HTTP/1.1 Host: event.on24.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 06:25:40 UTC	770	IN	HTTP/1.1 410 Gone Connection: close Date: Thu, 24 Oct 2024 06:25:39 GMT Content-Length: 1709 Content-Type: text/html; charset=UTF-8 X-ORACLE-DMS-ECID: 0d1e8c5f-de70-4724-a72b-0fc86a51cacf-00126bc8 X-ORACLE-DMS-RID: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: ON24_Pool=cons5_prd_wl_LNX; Path=/; Secure; Httponly; SameSite=None Set-Cookie: TS0af49cbe027=082972b052ab2000458d849e95e4c8af620414676fba873876f4abfd97c1a3b135706c461f891fcd084647ec821130005351976b5bd5ddc74d332da0d4ed12bad5ad60fdf22837f3b2aa20e0626ee8e712e0f990bfda6fd761a28ac99896bd2f; Path=/; SameSite=None; Secure
2024-10-24 06:25:40 UTC	1448	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 44 72 61 66 74 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 34 31 30 2d 2d 47 6f 6e 65 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 48 65 6c 76 65 74 69 63 61 3e 3c 42 52 20 43 4c 45 41 52 3d 61 6c 6c 3e 0a 3c 54 41 42 4c 45 20 62 6f 72 64 65 72 3d 30 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 35 3e 3c 54 52 3e 3c 54 44 3e 3c 42 52 20 43 4c 45 41 52 3d 61 6c 6c 3e 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 22 20 43 4f 4c 4f 52 3d 22 62 6c 61 63 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Draft//EN"><HTML><HEAD><TITLE>Error 410--Gone</TITLE></HEAD><BODY bgcolor="white"><FONT FACE=Helvetica><BR CLEAR=all><TABLE border=0 cellspacing=5><TR><TD><BR CLEAR=all><FONT FACE="Helvetica" COLOR="blac
2024-10-24 06:25:40 UTC	261	IN	Data Raw: 72 20 77 6f 72 6b 69 6e 67 20 61 74 20 74 68 65 20 73 65 72 76 65 72 27 73 20 73 69 74 65 2e 20 49 74 20 69 73 20 6e 6f 74 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 6d 61 72 6b 20 61 6c 6c 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 20 72 65 73 6f 75 72 63 65 73 20 61 73 20 22 67 6f 6e 65 22 20 6f 72 20 74 6f 20 6b 65 65 70 20 74 68 65 20 6d 61 72 6b 20 66 6f 72 20 61 6e 79 20 6c 65 6e 67 74 68 20 6f 66 20 74 69 6d 65 20 2d 2d 20 74 68 61 74 20 69 73 20 6c 65 66 74 20 74 6f 20 74 68 65 20 64 69 73 63 72 65 74 69 6f 6e 20 6f 66 20 74 68 65 20 73 65 72 76 65 72 20 6f 77 6e 65 72 2e 3c 2f 46 4f 4e 54 3e 3c 2f 50 3e 0a 3c 2f 46 4f 4e 54 3e 3c 2f 54 44 3e 3c 2f 54 52 3e 0a 3c 2f 54 41 42 4c 45 3e 0a 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f Data Ascii: r working at the server's site. It is not necessary to mark all permanently unavailable resources as "gone" or to keep the mark for any length of time -- that is left to the discretion of the server owner.</FONT></P></FONT></TD></TR></TABLE></BODY></

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	199.83.44.71	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:25:40 UTC	975	OUT	GET /favicon.ico HTTP/1.1 Host: event.on24.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://event.on24.com/eventRegistration/EventCalendarServlet.ics?token=r9CoWDUdO1lVOtYXwjaTzs%2BMH5c45HWw3nQNqj4k0DmH94YKUhM%2BstSBnsUp1IpIuFxYD%2FwxShMr5w7WjZNahA%3D%3D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ON24_Pool=cons5_prd_wl_LNX; TS0af49cbe027=082972b052ab2000458d849e95e4c8af620414676fba873876f4abfd97c1a3b135706c461f891fcd084647ec821130005351976b5bd5ddc74d332da0d4ed12bad5ad60fdf22837f3b2aa20e0626ee8e712e0f990bfda6fd761a28ac99896bd2f
2024-10-24 06:25:40 UTC	833	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:25:40 GMT Server: Apache Last-Modified: Thu, 05 Dec 2019 23:00:06 GMT Accept-Ranges: bytes Content-Length: 1150 Content-Type: image/x-icon Connection: close Set-Cookie: BIGipServereventprd_apache=!07aC5egc3pPnQJweSVii2HqB/dyrq4Cb7vZUM6jLzss7cRuwBmkYOo2UrN2jmVlVplRbofGXrj119troTxSLN4/zTHM6sS1gXGXL6iv9Pc3DoWw7OizfopwEsH/wNyVKvt0k+sMO20eQhfv57wAbfiNFalBn03Q=; path=/; Httponly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Set-Cookie: TS0af49cbe027=082972b052ab2000f4e8b0b789f52d8f4e1a9159cf5cdd92d40295d1c8988006592a3f84b8732b38083a21a23d113000e14e5391d9b6d4296bf3a043717f602aba47b7c2c57a90d93298085eecb287a344aa767174b5e3482b92f6f55639d5e5; Path=/; SameSite=None; Secure
2024-10-24 06:25:40 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 40 30 e6 e8 40 30 f2 e8 40 30 f2 e8 41 31 f2 e8 3f 2f f2 e6 32 21 f2 e5 26 14 f2 e4 1f 0c f2 e4 1f 0d f2 e5 26 14 f2 e6 32 21 f2 e8 3f 2f f2 e8 41 31 f2 e8 40 30 f2 e8 40 30 f2 e8 40 30 e6 e8 40 30 ff e8 40 30 ff e8 43 33 ff e7 33 22 ff e5 24 11 ff ea 4f 41 ff f0 82 78 ff f4 a0 97 ff f4 9f 97 ff f0 81 77 ff ea 4f 40 ff e5 24 12 ff e7 35 24 ff e8 43 33 ff e8 40 30 ff e8 40 30 ff e8 40 30 f2 e8 43 33 ff e6 2d 1b ff e7 36 26 ff f4 a2 9a ff fe fa f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe f6 f5 ff f4 a0 98 ff e6 31 20 ff e6 2f 1d ff e8 43 33 ff e8 40 30 f2 e8 Data Ascii: h( @0@0@0A1?/2!&&2!?/A1@0@0@0@0@0C33"$OAxwO@$5$C3@0@0@0C3-6&1 /C3@0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	199.83.44.71	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:25:41 UTC	783	OUT	GET /favicon.ico HTTP/1.1 Host: event.on24.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ON24_Pool=cons5_prd_wl_LNX; BIGipServereventprd_apache=!07aC5egc3pPnQJweSVii2HqB/dyrq4Cb7vZUM6jLzss7cRuwBmkYOo2UrN2jmVlVplRbofGXrj119troTxSLN4/zTHM6sS1gXGXL6iv9Pc3DoWw7OizfopwEsH/wNyVKvt0k+sMO20eQhfv57wAbfiNFalBn03Q=; TS0af49cbe027=082972b052ab2000f4e8b0b789f52d8f4e1a9159cf5cdd92d40295d1c8988006592a3f84b8732b38083a21a23d113000e14e5391d9b6d4296bf3a043717f602aba47b7c2c57a90d93298085eecb287a344aa767174b5e3482b92f6f55639d5e5
2024-10-24 06:25:41 UTC	672	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:25:41 GMT Server: Apache Last-Modified: Thu, 05 Dec 2019 23:00:06 GMT Accept-Ranges: bytes Content-Length: 1150 Content-Type: image/x-icon Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors *.on24.com Set-Cookie: TS0af49cbe027=082972b052ab2000ed14b5c44f492993ec721bec36b9000b4dc32c6a7dad964347caac1963f6b0c008181024031130002f51b26e1818b0b19185d6b5c92d36875c0cd50c291356f7f19c5c5447decda95785d9ca7c6ac809a01cbf9e1163e832; Path=/; SameSite=None; Secure
2024-10-24 06:25:41 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 40 30 e6 e8 40 30 f2 e8 40 30 f2 e8 41 31 f2 e8 3f 2f f2 e6 32 21 f2 e5 26 14 f2 e4 1f 0c f2 e4 1f 0d f2 e5 26 14 f2 e6 32 21 f2 e8 3f 2f f2 e8 41 31 f2 e8 40 30 f2 e8 40 30 f2 e8 40 30 e6 e8 40 30 ff e8 40 30 ff e8 43 33 ff e7 33 22 ff e5 24 11 ff ea 4f 41 ff f0 82 78 ff f4 a0 97 ff f4 9f 97 ff f0 81 77 ff ea 4f 40 ff e5 24 12 ff e7 35 24 ff e8 43 33 ff e8 40 30 ff e8 40 30 ff e8 40 30 f2 e8 43 33 ff e6 2d 1b ff e7 36 26 ff f4 a2 9a ff fe fa f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe f6 f5 ff f4 a0 98 ff e6 31 20 ff e6 2f 1d ff e8 43 33 ff e8 40 30 f2 e8 Data Ascii: h( @0@0@0A1?/2!&&2!?/A1@0@0@0@0@0C33"$OAxwO@$5$C3@0@0@0C3-6&1 /C3@0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:25:42 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 06:25:42 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=37164 Date: Thu, 24 Oct 2024 06:25:42 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:25:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 06:25:43 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=37243 Date: Thu, 24 Oct 2024 06:25:43 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 06:25:43 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49752	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:29 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:30 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:30 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 84bcd95b-b01e-001e-1a38-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062630Z-17fbfdc98bbx648l6xmxqcmf2000000006z0000000001c0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:30 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 06:26:30 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 06:26:30 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 06:26:30 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 06:26:30 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 06:26:30 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 06:26:30 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 06:26:30 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 06:26:30 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 06:26:30 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49753	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:31 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:31 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062631Z-r1755647c66kv68zfmyfrbcqzg00000007wg000000002tq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:31 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49754	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:31 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:31 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062631Z-r1755647c66xrxq4nv7upygh4s00000002u0000000005767 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:31 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49755	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:31 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:31 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062631Z-r1755647c66sn7s9kfw6gzvyp000000009eg000000001fu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:31 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49756	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:31 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:31 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062631Z-17fbfdc98bbx648l6xmxqcmf20000000070g0000000001d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:31 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49757	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:31 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:31 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062631Z-17fbfdc98bblptj7fr9s141cpc0000000700000000000ne2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:31 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49759	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:32 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062632Z-r1755647c66xrxq4nv7upygh4s00000002zg00000000009p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49758	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:32 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062632Z-17fbfdc98bb4k5z6ayu7yh2rsn00000006yg000000003ea5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:32 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49760	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:32 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a0191c6f-501e-0047-3c5d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062632Z-17fbfdc98bbq2x5bzrteug30v800000006u0000000004ryx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49762	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:32 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:32 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 895e1389-601e-005c-16b8-20f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062632Z-r1755647c66x46wg1q56tyyk6800000008k0000000005psu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:32 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49761	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:32 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:32 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: fbb8ce34-501e-0064-0cbd-201f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062632Z-r1755647c66kv68zfmyfrbcqzg00000007wg000000002tqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:32 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49763	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:33 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: bac56044-101e-0079-505d-235913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062633Z-17fbfdc98bbpc9nz0r22pywp0800000006y00000000053u6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49764	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:33 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062633Z-17fbfdc98bb2fzn810kvcg2zng00000006yg000000004pmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49765	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:33 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:33 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062633Z-r1755647c66ww2rh494kknq3r00000000a40000000003832 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:33 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49767	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:33 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062633Z-r1755647c66zs9x4962sbyaz1w00000007ng000000000tbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49766	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:33 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062633Z-r1755647c66fnxpdavnqahfp1w00000007gg000000004the x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49768	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:34 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:34 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bb9292ef-d01e-00ad-5d35-21e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062634Z-r1755647c66dj7986akr8tvaw400000008h0000000006h5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:34 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49769	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:34 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 5e1d4904-301e-0020-1550-236299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062634Z-17fbfdc98bblptj7fr9s141cpc00000006tg000000005qtt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49770	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:34 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c39ac956-e01e-001f-465d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062634Z-17fbfdc98bbrx2rj4asdpg8sbs00000002x0000000001sa7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49772	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:34 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:34 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062634Z-r1755647c66ww2rh494kknq3r00000000a3g0000000049km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:34 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49771	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:34 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:34 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: c30aac03-701e-0098-3e64-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062634Z-17fbfdc98bbqc8zsbguzmabx6800000006vg000000001tr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:34 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49773	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:35 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062635Z-r1755647c66ldfgxa3qp9d53us00000009fg000000000nzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49776	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:35 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6949b098-b01e-0084-1a35-21d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062635Z-r1755647c66k9st9tvd58z9dg800000009b000000000469x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49774	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:35 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062635Z-17fbfdc98bbgqz661ufkm7k13c00000006ug000000003d52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49775	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:35 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:35 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b93710ac-501e-007b-525a-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062635Z-17fbfdc98bbrx2rj4asdpg8sbs00000002x0000000001sak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:35 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49777	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:35 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:35 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062635Z-17fbfdc98bbrx2rj4asdpg8sbs00000002x0000000001sam x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:35 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49778	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:35 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:35 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062635Z-r1755647c66nfj7t97c2qyh6zg00000006300000000068wp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:36 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49779	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:35 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062636Z-r1755647c66prnf6k99z0m3kzc00000009bg0000000044r2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49780	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:35 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:35 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062635Z-17fbfdc98bbq2x5bzrteug30v800000006v000000000590s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49781	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:35 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 346ac1b5-f01e-003f-6ed5-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062636Z-r1755647c66gb86l6k27ha2m1c00000007tg000000006819 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49782	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:35 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:36 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: c04d3aa5-c01e-002b-4b56-236e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062636Z-17fbfdc98bbvf2fnx6t6w0g25n00000006v0000000005gfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:36 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49784	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:36 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:36 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062636Z-17fbfdc98bbndwgn5b4pg7s8bs00000006rg000000004ypn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:36 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49785	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:36 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 36d132e2-e01e-0051-5c92-1f84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062636Z-r1755647c66sxs9zhy17bg185w0000000a2g000000005uww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49786	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:36 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 064568ba-501e-008c-7d65-23cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062636Z-17fbfdc98bbvf2fnx6t6w0g25n00000006wg000000005ek8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49788	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:36 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:36 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: ee1aea59-301e-0052-0750-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062636Z-17fbfdc98bbvf2fnx6t6w0g25n000000072g0000000003rw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:37 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49787	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:36 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 319a90d3-d01e-0066-4138-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062636Z-r1755647c66sn7s9kfw6gzvyp000000009dg00000000272d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:37 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49790	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:37 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:37 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e337ee23-e01e-003c-1ecf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062637Z-r1755647c669hnl7dkxy835cqc000000073g000000004haw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49789	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:37 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:37 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 8700b1e1-801e-008f-0e93-212c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062637Z-r1755647c66wjht63r8k9qqnrs00000007z000000000075w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:37 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49791	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:37 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062637Z-17fbfdc98bb2fzn810kvcg2zng00000006x00000000065t7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49793	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:37 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 0c1e413e-701e-0021-5e50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062637Z-17fbfdc98bb7k7m5sdc8baghes00000006zg000000002ky6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:37 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49792	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:37 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:37 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062637Z-17fbfdc98bbczcjda6v8hpct4c00000000gg000000002s2m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:37 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49794	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:38 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:38 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:38 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3589f4cc-c01e-0079-731b-24e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062638Z-r1755647c66s2pfjx11r8ys39000000000r0000000001uq3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:38 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49795	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:38 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:38 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1bb7fc0c-c01e-0046-7759-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062638Z-17fbfdc98bb94gkbvedtsa5ef400000006zg000000002a9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:38 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49796	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:38 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:38 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0c1e418e-701e-0021-2a50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062638Z-17fbfdc98bbwfg2nvhsr4h37pn000000070g000000001gcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:38 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49797	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:38 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:38 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 68ab0001-401e-0064-04b8-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062638Z-r1755647c66prnf6k99z0m3kzc00000009c0000000003pz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:38 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49798	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:38 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:38 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062638Z-r1755647c66mgrw7zd8m1pn55000000007wg000000002mpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:38 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49800	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:39 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:39 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f651688a-e01e-0071-5b56-2308e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062639Z-17fbfdc98bb9dlh7es9mrdw2qc00000006s00000000043r5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:39 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49801	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:39 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:39 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 629c9caa-001e-0079-2150-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062639Z-17fbfdc98bbq2x5bzrteug30v800000006t0000000005s35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:39 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49802	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:39 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062639Z-r1755647c66xn9fj09y3bhxnh40000000a3g000000004vzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49799	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:39 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:39 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062639Z-r1755647c66vrwbmeqw88hpesn0000000970000000000374 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:39 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49803	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:39 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:39 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062639Z-r1755647c66sxs9zhy17bg185w0000000a30000000004qhx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:39 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49804	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:40 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b6a35dc4-401e-008c-3156-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062640Z-17fbfdc98bbkw9phumvsc7yy8w00000006y00000000025e5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49807	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:40 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062640Z-r1755647c66l72xfkr6ug378ks0000000860000000005qra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49805	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:40 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062640Z-r1755647c66kv68zfmyfrbcqzg00000007s0000000006ny2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49806	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:40 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1c3f4cdf-f01e-0096-775d-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062640Z-17fbfdc98bb4k5z6ayu7yh2rsn000000071g00000000120e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49808	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:40 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062640Z-r1755647c66sn7s9kfw6gzvyp000000009a0000000006692 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49810	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:41 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:41 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cc65e471-501e-008c-15b8-20cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062641Z-r1755647c66nfj7t97c2qyh6zg000000064g000000005sa9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:41 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49812	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:41 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:41 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: f58edff3-b01e-0002-5659-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062641Z-17fbfdc98bb94gkbvedtsa5ef400000006x0000000004a8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:41 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49814	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:41 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:41 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6acd84c4-d01e-0066-15aa-20ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062641Z-r1755647c66cdf7jx43n17haqc0000000a10000000005qq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:41 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49811	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:41 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:41 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 44b67bbb-401e-0067-2250-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062641Z-17fbfdc98bbndwgn5b4pg7s8bs00000006v0000000002h72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:41 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49813	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:41 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062641Z-17fbfdc98bb4k5z6ayu7yh2rsn00000006xg000000003cvt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49816	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:42 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:42 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062642Z-17fbfdc98bb2fzn810kvcg2zng0000000730000000001d3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:42 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49815	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:42 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:42 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062642Z-r1755647c66gb86l6k27ha2m1c00000007u0000000004nfr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:42 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49817	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:42 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:42 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2157dfbc-901e-0048-585d-23b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062642Z-17fbfdc98bbqc8zsbguzmabx6800000006ug000000002g7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:42 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49818	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:42 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:42 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: df53dfe1-801e-0067-2856-23fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062642Z-17fbfdc98bb94gkbvedtsa5ef400000006w000000000645q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:42 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49819	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:42 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:42 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062642Z-17fbfdc98bbq2x5bzrteug30v800000006ug000000004ue5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:42 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49821	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:43 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:43 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062643Z-17fbfdc98bb6q7cv86r4xdspkg00000006w00000000056au x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:43 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49820	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:43 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062643Z-r1755647c66kv68zfmyfrbcqzg00000007wg000000002ttf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49822	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:43 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:43 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062643Z-17fbfdc98bb4k5z6ayu7yh2rsn000000072g0000000006mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:43 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49823	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:43 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:43 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062643Z-17fbfdc98bb9dlh7es9mrdw2qc00000006q0000000004q9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:43 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49824	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:43 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:43 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: fc76b70a-c01e-0034-0bf8-202af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062643Z-r1755647c66lljn2k9s29ch9ts00000009dg000000002cym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:43 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49829	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:44 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:44 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 8414f4d3-801e-0047-1592-1f7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062644Z-r1755647c66ldfgxa3qp9d53us00000009fg000000000p83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:44 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49828	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:44 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 84bcad4d-101e-007a-3592-1f047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062644Z-r1755647c66c9glmgg3prd89mn000000098g000000006wvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49827	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:44 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:44 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062644Z-r1755647c66h2wzt2z0cr0zc7400000003k0000000001dvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:44 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49825	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:44 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 5871072e-001e-0034-4bb0-20dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062644Z-r1755647c66ldfgxa3qp9d53us00000009b0000000003puz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49826	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:44 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f46f8e47-e01e-00aa-72c7-20ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062644Z-r1755647c66zs9x4962sbyaz1w00000007m0000000002dz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49831	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:45 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:45 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062645Z-17fbfdc98bb94gkbvedtsa5ef4000000071g000000000udu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:45 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49830	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:45 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:45 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062645Z-17fbfdc98bb8xnvm6t4x6ec5m400000006v0000000001r1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:45 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49833	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:45 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:45 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:45 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062645Z-17fbfdc98bbczcjda6v8hpct4c00000000mg000000002p9y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:45 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49834	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:45 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:45 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 47efb004-101e-0017-69d3-2047c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062645Z-r1755647c66tmf6g4720xfpwpn0000000a5g000000002nzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:45 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49832	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:45 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:45 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: ea73d60f-001e-0017-0292-1f0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062645Z-r1755647c66qqfh4kbna50rqv40000000a800000000008ur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:45 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49836	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:46 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5a8d2ac8-001e-0034-336b-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062646Z-17fbfdc98bbgqz661ufkm7k13c00000006s0000000004zqh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49838	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:46 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:46 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062646Z-r1755647c66zs9x4962sbyaz1w00000007e0000000006krp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49837	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:46 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:46 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062646Z-r1755647c66sxs9zhy17bg185w0000000a4g0000000037gt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49839	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:46 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 514e14b5-c01e-0014-51c9-20a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062646Z-r1755647c66sxs9zhy17bg185w0000000a7000000000157q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49835	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:46 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:46 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: aaa69ab3-801e-0047-5050-237265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062646Z-17fbfdc98bbgzrcvp7acfz2d300000000700000000001mbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:46 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49840	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:47 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062647Z-r1755647c669hnl7dkxy835cqc000000077g000000000xuu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49841	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:47 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: b7bcbf2c-f01e-0071-0ae2-20431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062647Z-r1755647c66cdf7jx43n17haqc0000000a5g000000002c22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49844	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:47 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:47 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062647Z-17fbfdc98bbk7nhquz3tfc3wbg00000006xg000000002fsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:47 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49842	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:47 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062647Z-r1755647c66z4pt7cv1pnqayy4000000099g000000005hu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49843	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:47 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062647Z-17fbfdc98bbkw9phumvsc7yy8w00000006v0000000004nmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49845	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:48 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:48 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c39afafb-e01e-001f-695d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062648Z-17fbfdc98bbx648l6xmxqcmf2000000006tg000000005ksf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:48 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49846	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:48 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:48 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: e3d367a8-d01e-0028-7850-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062648Z-17fbfdc98bbx4f4q0941cebmvs00000006rg000000005vre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:48 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49847	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:48 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:48 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ef02ab36-401e-0064-3bb0-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062648Z-r1755647c66xn9fj09y3bhxnh40000000a20000000005nbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:48 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49848	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:48 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:48 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062648Z-r1755647c66n5bjpba5s4mu9d000000009dg000000002tdw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:48 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49849	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:48 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:48 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 28cefb6f-601e-003d-6a50-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062648Z-17fbfdc98bb94gkbvedtsa5ef40000000710000000001rec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:48 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49852	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:49 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e682fb07-001e-00a2-2ae3-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062649Z-r1755647c66dj7986akr8tvaw400000008kg000000004e2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49850	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:49 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: dc072958-d01e-0065-5150-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062649Z-17fbfdc98bb4k5z6ayu7yh2rsn00000006vg000000005s80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49851	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:49 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 33f58e49-701e-0053-6bb3-203a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062649Z-r1755647c66prnf6k99z0m3kzc00000009f0000000000yk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:49 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49853	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:49 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062649Z-r1755647c66ldfgxa3qp9d53us00000009cg0000000036qw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49854	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:49 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:49 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: ee1afe0a-301e-0052-2b50-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062649Z-17fbfdc98bbvcvlzx1n0fduhm000000007200000000022mk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:49 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49856	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:50 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:50 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062650Z-r1755647c66lljn2k9s29ch9ts000000099g000000005wpz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:50 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49855	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:50 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:50 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 75addd74-001e-0065-0e92-1f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062650Z-r1755647c66ww2rh494kknq3r00000000a10000000006nnt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49857	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:50 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:50 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: d904b25e-d01e-0066-3f59-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062650Z-17fbfdc98bb8xnvm6t4x6ec5m400000006s00000000046e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:50 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49858	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:50 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:50 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062650Z-17fbfdc98bblptj7fr9s141cpc00000006u0000000004st2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49859	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:50 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:50 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 3ed3a1a2-201e-0085-145a-2334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062650Z-17fbfdc98bbx4f4q0941cebmvs00000006rg000000005vs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:50 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49860	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:51 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:51 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: fca683ae-601e-0070-466b-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062651Z-17fbfdc98bb6q7cv86r4xdspkg00000006w00000000056h9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:51 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49862	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:51 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:51 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a4c96680-901e-008f-156c-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062651Z-17fbfdc98bb7qlzm4x52d2225c00000006z00000000010mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:51 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49861	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:51 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:51 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062651Z-17fbfdc98bbn5xh71qanksxprn00000006yg000000004ynp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:51 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49864	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:51 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:51 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: ba25bf78-401e-0015-2450-230e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062651Z-r1755647c66lljn2k9s29ch9ts00000009g00000000000rh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:51 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49863	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:51 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:51 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 09861b75-b01e-005c-4550-234c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062651Z-17fbfdc98bb7k7m5sdc8baghes00000006w0000000005pmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:51 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49865	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:52 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:52 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062652Z-r1755647c66k9st9tvd58z9dg800000009cg000000003432 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:52 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49866	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:52 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 1aaeab13-501e-0078-31c1-2006cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062652Z-r1755647c66xn9fj09y3bhxnh40000000a3g000000004w5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49867	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:52 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b71c6767-a01e-0021-3a5a-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062652Z-17fbfdc98bbgqz661ufkm7k13c00000006x00000000015c3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49869	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:52 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:52 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: b1cc7e4f-b01e-001e-6956-230214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062652Z-17fbfdc98bbn5xh71qanksxprn00000006yg000000004yp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:52 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49868	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:52 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:52 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:52 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062652Z-r1755647c66s2pfjx11r8ys39000000000gg000000004pbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 06:26:52 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49871	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:53 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:53 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 728679af-d01e-007a-566c-23f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062653Z-17fbfdc98bbczcjda6v8hpct4c00000000g0000000002va0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49872	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:53 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:53 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 8522a688-a01e-0084-2768-219ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062653Z-r1755647c66f2zlraraf0y5hrs00000007rg000000006psz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:53 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49873	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:53 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 28e56280-601e-003d-4259-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062653Z-17fbfdc98bbcrtjhdvnfuyp288000000071g000000002rzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49874	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:53 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:53 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 23449c74-401e-0083-0a50-23075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062653Z-17fbfdc98bb4k5z6ayu7yh2rsn00000006vg000000005s8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:53 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49870	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:53 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062653Z-r1755647c66sxs9zhy17bg185w0000000a7g000000000xzs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49875	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:54 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:54 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 90f594d0-e01e-0003-5056-230fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062654Z-17fbfdc98bblvnlh5w88rcarag00000006z00000000047k0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:54 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49877	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:54 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:54 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0b335c04-001e-0049-76aa-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062654Z-r1755647c66dj7986akr8tvaw400000008p000000000298z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:54 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49876	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:54 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:54 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: dc073066-d01e-0065-6c50-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062654Z-17fbfdc98bbx4f4q0941cebmvs00000006tg0000000040uy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:54 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49878	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:54 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:54 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 7d169aa3-d01e-0017-7930-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062654Z-r1755647c66nfj7t97c2qyh6zg00000006900000000019qb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:54 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49879	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:54 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:54 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:54 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062654Z-17fbfdc98bblvnlh5w88rcarag00000007200000000020w9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:54 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49880	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:55 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:55 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: fa7d2ad1-701e-0098-7450-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062655Z-17fbfdc98bbqc8zsbguzmabx6800000006rg000000004sh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:55 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49882	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:55 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:55 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 26312148-601e-003e-327a-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062655Z-17fbfdc98bbq2x5bzrteug30v800000006z0000000001bgv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:55 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49881	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:55 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:55 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:55 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062655Z-r1755647c66s2pfjx11r8ys39000000000n0000000004qnz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:55 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49883	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:55 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:55 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: a6907b5e-801e-0047-4517-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062655Z-r1755647c66l72xfkr6ug378ks00000008a0000000001qvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:55 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49884	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:55 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:55 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062655Z-r1755647c66n5bjpba5s4mu9d000000009b00000000049vr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:55 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49886	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:56 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:56 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062656Z-r1755647c66sxs9zhy17bg185w0000000a40000000004372 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:56 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49888	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:56 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:56 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: d9c148d9-d01e-00ad-325d-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062656Z-17fbfdc98bbgqz661ufkm7k13c00000006ug000000003ds6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:56 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49887	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:56 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:56 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 6abfa9df-401e-00ac-4092-1f0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062656Z-r1755647c66prnf6k99z0m3kzc00000009dg0000000029w5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:56 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49885	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:56 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:56 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062656Z-r1755647c66nfj7t97c2qyh6zg000000069g0000000016e8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:56 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49889	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:56 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:56 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: aba5bc6a-e01e-0003-59e5-210fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062656Z-r1755647c66l72xfkr6ug378ks000000086g000000004ycz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:56 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49890	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:57 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:57 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 84b452aa-401e-0083-4c95-1f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062657Z-r1755647c66ww2rh494kknq3r00000000a3g0000000049pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:57 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49892	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:57 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:57 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 7e8f74bf-e01e-000c-3628-218e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062657Z-r1755647c66prnf6k99z0m3kzc000000098g0000000071rf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:57 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49891	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:57 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:57 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: ad03bb8d-101e-0065-56e3-204088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062657Z-r1755647c66tmf6g4720xfpwpn0000000a0g000000006m7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:57 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49893	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:57 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:57 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: b91d5e6a-e01e-0085-2c6c-23c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062657Z-17fbfdc98bb75b2fuh11781a0n00000006x000000000104a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:57 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49894	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 06:26:57 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 06:26:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 06:26:57 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 77170aa2-001e-0049-0450-235bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T062657Z-17fbfdc98bbcrtjhdvnfuyp288000000074g00000000093b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 06:26:57 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2416, Parent PID: 908

General

Target ID:	0
Start time:	02:25:30
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3748, Parent PID: 2416

General

Target ID:	2
Start time:	02:25:34
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1996,i,15453027226570084546,1880742390870262341,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6308, Parent PID: 908

General

Target ID:	3
Start time:	02:25:36
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.sg.on24event.com/ls/click?upn=u001.7kf5QUY4LGF7Fzt7LGE4bbPPsSPtBC4KXSPVJqWhtiHjX8DoCw-2F6wUeQ27RvG2-2F-2FyOCUgAe-2BapJJCrwiDoubXwxmIHQZ2do2nzugRpbj8sWUY9cLBSkLNl0QOsQhRSi1zvMya46X7tlLUJv10eDr6e03Gt94WaE45RxiQNsUhLUvBlQvstz4lsFTpt1iHgyHMLb-2FULH-2BKG4s6J1Dm42fxw0-2BXth-2Fbrjs6t8h42i9p23xHaMeYHZZZLgXq3tV0yWAr7uV_b-2BTvzGoCot69w5CrUH-2FS1Y-2FtHpOqUe5Tde2CA1VIo0PHMLtBpwTjW-2B3ez0JDqpgulOBb-2BAC2rARvB9iGHIXFa5RZcTUQZFc35R8ql2TehP86yFFkCp-2BUUvhzPKc1Rzj8vg-2FlIpu1mzlzKpkUzgADQW83F-2BkmamLFxD3pBB5Y8fb5amltgfONUEqq1D4KdoPzgZ2pvl10nd2KoyH1CRTES7zIMtWSl1JBBk2B-2BsK9izcDP-2BHogj9IAOv3d44PsqiC2Z5JkoOO5oY2M-2BqtYFUyqBmomEzUYHRW9Kymc47UQnRGLtUFGuvEzuyEewpJBzb0JiWUpzVX9Ku7zPRnHAWIIA-3D-3D"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 40

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2416, Parent PID: 908

General

Chronological Activities

Analysis Process: chrome.exePID: 3748, Parent PID: 2416

General

Chronological Activities

Analysis Process: chrome.exePID: 6308, Parent PID: 908

General

Chronological Activities

Disassembly