Edit tour

Windows Analysis Report
https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png

Overview

General Information

Sample URL:	https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png
Analysis ID:	1541354
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2028,i,9909528904355472854,4827053517861882051,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:64103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:64148 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:64101 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=E3WYXKGBK8tSARs&MD=goLEUVsd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=E3WYXKGBK8tSARs&MD=goLEUVsd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: docucdn-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 64238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 64285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64220
Source: unknown	Network traffic detected: HTTP traffic on port 64221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64218
Source: unknown	Network traffic detected: HTTP traffic on port 64141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64216
Source: unknown	Network traffic detected: HTTP traffic on port 64176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64229
Source: unknown	Network traffic detected: HTTP traffic on port 64267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64226
Source: unknown	Network traffic detected: HTTP traffic on port 64232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64227
Source: unknown	Network traffic detected: HTTP traffic on port 64152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64241
Source: unknown	Network traffic detected: HTTP traffic on port 64290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64119
Source: unknown	Network traffic detected: HTTP traffic on port 64268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64235
Source: unknown	Network traffic detected: HTTP traffic on port 64302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64118
Source: unknown	Network traffic detected: HTTP traffic on port 64199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64250
Source: unknown	Network traffic detected: HTTP traffic on port 64107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64252
Source: unknown	Network traffic detected: HTTP traffic on port 64279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64249
Source: unknown	Network traffic detected: HTTP traffic on port 64211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64302
Source: unknown	Network traffic detected: HTTP traffic on port 64255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64208
Source: unknown	Network traffic detected: HTTP traffic on port 64139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64207
Source: unknown	Network traffic detected: HTTP traffic on port 64190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64209
Source: unknown	Network traffic detected: HTTP traffic on port 64244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64202
Source: unknown	Network traffic detected: HTTP traffic on port 64173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64187
Source: unknown	Network traffic detected: HTTP traffic on port 64282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64192
Source: unknown	Network traffic detected: HTTP traffic on port 64235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64193
Source: unknown	Network traffic detected: HTTP traffic on port 64155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64190
Source: unknown	Network traffic detected: HTTP traffic on port 64270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64188
Source: unknown	Network traffic detected: HTTP traffic on port 64196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64199
Source: unknown	Network traffic detected: HTTP traffic on port 64212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64141
Source: unknown	Network traffic detected: HTTP traffic on port 64131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64261
Source: unknown	Network traffic detected: HTTP traffic on port 64154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64142
Source: unknown	Network traffic detected: HTTP traffic on port 64257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64263
Source: unknown	Network traffic detected: HTTP traffic on port 64119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64138
Source: unknown	Network traffic detected: HTTP traffic on port 64214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64139
Source: unknown	Network traffic detected: HTTP traffic on port 64197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64273
Source: unknown	Network traffic detected: HTTP traffic on port 64281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64274
Source: unknown	Network traffic detected: HTTP traffic on port 64165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64269
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64280
Source: unknown	Network traffic detected: HTTP traffic on port 64236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64161
Source: unknown	Network traffic detected: HTTP traffic on port 64175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64165
Source: unknown	Network traffic detected: HTTP traffic on port 64280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64286
Source: unknown	Network traffic detected: HTTP traffic on port 64108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64158
Source: unknown	Network traffic detected: HTTP traffic on port 64120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64291
Source: unknown	Network traffic detected: HTTP traffic on port 64153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64293
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64176
Source: unknown	Network traffic detected: HTTP traffic on port 64258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64296
Source: unknown	Network traffic detected: HTTP traffic on port 64202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64289
Source: unknown	Network traffic detected: HTTP traffic on port 64213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64198 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:64103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:64148 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/4@4/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2028,i,9909528904355472854,4827053517861882051,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2028,i,9909528904355472854,4827053517861882051,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
docucdn-a.akamaihd.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.186.36	www.google.com	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541354
Start date and time:	2024-10-24 18:14:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/4@4/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.78, 173.194.76.84, 172.217.18.99, 34.104.35.123, 2.19.126.227, 2.19.126.218, 199.232.210.172, 20.242.39.171, 192.229.221.95, 52.165.164.15, 13.95.31.18, 131.107.255.255, 216.58.212.163
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, docucdn-a.akamaihd.net.edgesuite.net, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, a1737.b.akamai.net, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10
Entropy (8bit):	3.1219280948873624
Encrypted:	false
SSDEEP:	3:OFZn:OFZn
MD5:	7605968E79D0CA095AB1231486D2B814
SHA1:	A007B420D19CEEFA840F0373E050E3B51A4AB480
SHA-256:	493FDA53120050F85836032324409BE6C6484F90A0755AE0C6A673BA7626818B
SHA-512:	769249DA7ED6C6BF5671BBC2371A6453B433226CEB8C4C2AA3604000D66647BCEC83DEE1AB64C0262FA40F923D77E23BAD2C47274D339EFFC51D904CE77072A6
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/favicon.ico
Preview:	Not found.

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 228 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2684
Entropy (8bit):	7.901894652512653
Encrypted:	false
SSDEEP:	48:B/6szm5aZYbB04l/HREz9CyaY6/8Rf78BLWlvhOmjtJBvQvxnwO:BSszm8Z4RHRG6uROLWb9RQj
MD5:	B4F8F0DCDA279711CB9224C2239323D4
SHA1:	3C1B1B68CD9D2D25FF5D7FB2C7A61271DFFBF41B
SHA-256:	53D92718DD6001A4EBF49D631AB9DF5B8194E6AF220790B1D8CF57164E38C6B0
SHA-512:	E97F783AF2EECCAFD684BDDE181C1509414997D2970405CC2AD7B9182439EF471EE6BF58253E6661A7B4491DD80523CC23C4544B0F9CF5AA0E9BFF4F20E7CA92
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png
Preview:	.PNG........IHDR.......2.....L0w.....pHYs.................sRGB.........gAMA......a.....IDATx...n....#...C.y..R .!.So..s.J.%7..@..h..v.@.[....}....^.^.r3Z.(.C.h3?s...q.....J.......3$.$..# ..D"...k...(..#..$Q........o."...{.).d.n.R.e...?.t5...._....2.+..... .....B..l...yQ.......2.....e.X.}.{PG.SH....J.\|..#....3D.FZ.Eh...d..............3..0......?."...x......4J.-....g..a8..9B$..e8....s.q...4JF[2....a.>.~3...6B.....D4d3......o.....r#.....=.jK...1.?...o..YW..Hdgyx.7.[.....?x.......P.........K.fT..5Y&.%CbyS\.a.a.....6..y....._`.....r..!...G<...0......B.E...=:......#.p...6........!+..!MQ....t.....m.6RhO.:..odmu@P#....m.......]...\|.ndS.PU\.]..`.f.Z...?.Ds]9....F).w....... ..W.........fW.R..J..4\.d4!.d.l..h..T.Rh/.+.z..R..5.h......-.{.n..@......V.k]..RR.H....(.+...C.MIl.\.LDG....C...k...)..H0qM.{.._..A+.'.c.....-..WY......pG....A.. .......Y)EG.#t.....(...._..H....".....>.Zl.:..g...W_[I............@=Zh.75t.9.y\...N.e\|..$....6...,9..h......3..fs.'9.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 18:15:45.379975080 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 18:15:51.204763889 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:15:51.204817057 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 24, 2024 18:15:51.204893112 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:15:51.214792967 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:15:51.214808941 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 24, 2024 18:15:51.724298000 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:51.724323034 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:51.724436045 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:51.725920916 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:51.725935936 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:52.257893085 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 24, 2024 18:15:52.258589983 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:15:52.258610010 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 24, 2024 18:15:52.260255098 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 24, 2024 18:15:52.260349989 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:15:52.261538982 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:15:52.261620998 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 24, 2024 18:15:52.301112890 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:15:52.301120996 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 24, 2024 18:15:52.348165989 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:15:52.573276997 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:52.573362112 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:52.578099012 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:52.578133106 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:52.578530073 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:52.626141071 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:52.667354107 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:52.868560076 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:52.868626118 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:52.868705034 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:52.868901968 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:52.868953943 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:52.868985891 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:52.869003057 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:52.915832043 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:52.915857077 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:52.915934086 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:52.916321993 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:52.916336060 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:53.775634050 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:53.775850058 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:53.776972055 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:53.776995897 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:53.777451038 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:53.778678894 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:53.819333076 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:54.025316954 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:54.025473118 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:54.026253939 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:54.026253939 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:54.027023077 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 18:15:54.027051926 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 18:15:58.554817915 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:15:58.554847956 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:15:58.554941893 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:15:58.555979967 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:15:58.555994034 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:15:59.672940016 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:15:59.673029900 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:15:59.688138008 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:15:59.688153982 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:15:59.689002991 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:15:59.738156080 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:00.591068983 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:00.600442886 CEST	49722	80	192.168.2.4	93.184.221.240
Oct 24, 2024 18:16:00.606303930 CEST	80	49722	93.184.221.240	192.168.2.4
Oct 24, 2024 18:16:00.606357098 CEST	49722	80	192.168.2.4	93.184.221.240
Oct 24, 2024 18:16:00.631333113 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:00.966162920 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:00.966224909 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:00.966244936 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:00.966279984 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:00.966283083 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:00.966305971 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:00.966314077 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:00.966331005 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:00.966331959 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:00.966355085 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:00.966655970 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:01.075925112 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:01.076001883 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:01.076010942 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:01.090689898 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:01.090749979 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:01.613327980 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:01.613337040 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:01.613354921 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:01.613359928 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:02.240762949 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 24, 2024 18:16:02.240822077 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 24, 2024 18:16:02.240964890 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:16:02.872286081 CEST	64101	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:16:02.877846956 CEST	53	64101	1.1.1.1	192.168.2.4
Oct 24, 2024 18:16:02.877927065 CEST	64101	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:16:02.877964020 CEST	64101	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:16:02.883353949 CEST	53	64101	1.1.1.1	192.168.2.4
Oct 24, 2024 18:16:03.255597115 CEST	49739	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:16:03.255625010 CEST	443	49739	142.250.186.36	192.168.2.4
Oct 24, 2024 18:16:03.482558966 CEST	53	64101	1.1.1.1	192.168.2.4
Oct 24, 2024 18:16:03.483380079 CEST	64101	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:16:03.489598989 CEST	53	64101	1.1.1.1	192.168.2.4
Oct 24, 2024 18:16:03.489661932 CEST	64101	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:16:05.437112093 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 24, 2024 18:16:05.445550919 CEST	80	49724	93.184.221.240	192.168.2.4
Oct 24, 2024 18:16:05.445615053 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 24, 2024 18:16:29.858498096 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:29.858525991 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:29.858603001 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:29.858920097 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:29.858932972 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:30.662813902 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:30.662902117 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:30.669697046 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:30.669707060 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:30.669996023 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:30.682193995 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:30.723340034 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:30.932076931 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:30.932105064 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:30.932121038 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:30.932216883 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:30.932246923 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:30.932310104 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.049411058 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.049462080 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.049547911 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.049567938 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.049624920 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.166841984 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.166866064 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.166970015 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.166984081 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.167052031 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.284006119 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.284029007 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.284110069 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.284127951 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.284276962 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.400924921 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.400950909 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.401068926 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.401092052 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.401237965 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.517961979 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.517982960 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.518066883 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.518078089 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.518134117 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.634839058 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.634902000 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.634931087 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.634953976 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.635018110 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.635018110 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.751921892 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.751988888 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.752022028 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.752038956 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.752125978 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.842443943 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.842463970 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.842571974 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.842591047 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.842662096 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.915743113 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.915761948 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.915860891 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.915885925 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.915935040 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.986942053 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.986960888 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.987019062 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.987035036 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:31.987081051 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:31.987107038 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.103523970 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.103553057 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.103610039 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.103645086 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.103663921 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.103689909 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.197278976 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.197299957 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.197415113 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.197482109 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.197577953 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.220366955 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.220451117 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.220539093 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.220540047 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.220629930 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.220652103 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.220666885 CEST	64103	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.220671892 CEST	443	64103	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.304285049 CEST	64104	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.304415941 CEST	443	64104	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.304647923 CEST	64104	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.305401087 CEST	64105	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.305440903 CEST	443	64105	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.305515051 CEST	64105	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.307476044 CEST	64106	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.307521105 CEST	443	64106	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.307651997 CEST	64106	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.307929993 CEST	64106	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.307991028 CEST	443	64106	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.308136940 CEST	64104	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.308181047 CEST	443	64104	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.309119940 CEST	64107	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.309134960 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.309201956 CEST	64107	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.309335947 CEST	64105	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.309349060 CEST	443	64105	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.309793949 CEST	64107	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.309808016 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.310849905 CEST	64108	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.310889006 CEST	443	64108	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:32.310971022 CEST	64108	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.311208963 CEST	64108	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:32.311228991 CEST	443	64108	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.065542936 CEST	443	64106	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.066250086 CEST	64106	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.066265106 CEST	443	64106	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.066914082 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.069576025 CEST	64106	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.069581985 CEST	443	64106	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.070056915 CEST	443	64105	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.070496082 CEST	64107	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.070522070 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.071121931 CEST	64107	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.071126938 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.072160006 CEST	64105	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.072160006 CEST	64105	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.072168112 CEST	443	64105	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.072181940 CEST	443	64105	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.083410978 CEST	443	64104	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.083981991 CEST	64104	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.083997965 CEST	443	64104	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.084611893 CEST	443	64108	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.084656954 CEST	64104	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.084667921 CEST	443	64104	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.085292101 CEST	64108	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.085310936 CEST	443	64108	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.089745045 CEST	64108	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.089751959 CEST	443	64108	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.202641964 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.202666044 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.202780962 CEST	64107	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.202810049 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.202927113 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.203155994 CEST	443	64106	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.203180075 CEST	443	64106	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.203195095 CEST	64107	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.203218937 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.203242064 CEST	443	64106	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.203249931 CEST	64107	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.203255892 CEST	443	64107	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.203305006 CEST	64106	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.203416109 CEST	64106	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.205450058 CEST	64106	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.205451012 CEST	64106	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.205470085 CEST	443	64106	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.205481052 CEST	443	64106	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.205492973 CEST	443	64105	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.205521107 CEST	443	64105	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.205580950 CEST	443	64105	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.205611944 CEST	64105	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.207544088 CEST	64105	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.209836960 CEST	64105	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.209847927 CEST	443	64105	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.209912062 CEST	64109	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.209947109 CEST	443	64109	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.212059975 CEST	64110	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.212115049 CEST	443	64110	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.212153912 CEST	64109	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.212255955 CEST	64110	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.212682009 CEST	64109	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.212704897 CEST	443	64109	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.214427948 CEST	64112	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.214451075 CEST	443	64112	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.214554071 CEST	64112	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.214559078 CEST	64110	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.214576960 CEST	443	64110	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.214679003 CEST	64112	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.214692116 CEST	443	64112	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.221733093 CEST	443	64104	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.221798897 CEST	443	64104	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.223843098 CEST	443	64108	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.224057913 CEST	64104	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.224059105 CEST	443	64108	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.224190950 CEST	64104	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.224190950 CEST	64104	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.224200010 CEST	443	64104	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.224206924 CEST	443	64104	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.224255085 CEST	64108	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.224255085 CEST	64108	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.224255085 CEST	64108	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.229217052 CEST	64114	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.229229927 CEST	443	64114	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.229268074 CEST	64113	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.229290009 CEST	443	64113	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.229346037 CEST	64114	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.229401112 CEST	64113	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.229666948 CEST	64113	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.229695082 CEST	443	64113	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.229763031 CEST	64114	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.229773998 CEST	443	64114	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.535537004 CEST	64108	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.535559893 CEST	443	64108	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.961983919 CEST	443	64110	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.962613106 CEST	64110	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.962630033 CEST	443	64110	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.963346004 CEST	64110	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.963352919 CEST	443	64110	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.971985102 CEST	443	64112	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.972424030 CEST	64112	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.972455025 CEST	443	64112	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.973108053 CEST	64112	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.973115921 CEST	443	64112	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.980385065 CEST	443	64109	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.980916977 CEST	64109	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.980926991 CEST	443	64109	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.981152058 CEST	64109	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.981157064 CEST	443	64109	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.984206915 CEST	443	64113	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.984606981 CEST	64113	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.984622002 CEST	443	64113	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.985083103 CEST	64113	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.985089064 CEST	443	64113	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.988543987 CEST	443	64114	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.989124060 CEST	64114	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.989144087 CEST	443	64114	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:33.989696026 CEST	64114	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:33.989701033 CEST	443	64114	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.098551035 CEST	443	64110	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.099128008 CEST	443	64110	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.099189043 CEST	64110	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.108880997 CEST	443	64112	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.109040976 CEST	443	64112	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.109097004 CEST	64112	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.111943007 CEST	64110	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.111979008 CEST	443	64110	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.112020016 CEST	64110	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.112030983 CEST	443	64110	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.114999056 CEST	64112	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.114999056 CEST	64112	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.115031958 CEST	443	64112	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.115042925 CEST	443	64112	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.123114109 CEST	64115	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.123150110 CEST	443	64115	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.123256922 CEST	64115	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.126349926 CEST	64116	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.126384020 CEST	443	64116	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.126446962 CEST	64116	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.127501011 CEST	64115	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.127518892 CEST	443	64115	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.127758980 CEST	64116	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.127774000 CEST	443	64116	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.132392883 CEST	443	64109	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.132472038 CEST	443	64109	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.132523060 CEST	64109	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.132586002 CEST	443	64114	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.132632971 CEST	64109	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.132643938 CEST	443	64109	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.132674932 CEST	64109	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.132680893 CEST	443	64109	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.132685900 CEST	443	64113	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.132694960 CEST	443	64114	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.132760048 CEST	64114	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.132870913 CEST	443	64113	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.132962942 CEST	64113	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.133301973 CEST	64114	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.133307934 CEST	443	64114	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.133320093 CEST	64114	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.133325100 CEST	443	64114	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.133476019 CEST	64113	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.133486032 CEST	443	64113	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.144512892 CEST	64117	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.144548893 CEST	443	64117	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.144603014 CEST	64117	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.145118952 CEST	64117	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.145138025 CEST	443	64117	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.146508932 CEST	64118	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.146533012 CEST	443	64118	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.146600962 CEST	64118	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.149935961 CEST	64119	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.149950027 CEST	443	64119	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.149998903 CEST	64119	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.150119066 CEST	64119	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.150134087 CEST	443	64119	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.150765896 CEST	64118	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.150778055 CEST	443	64118	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.878679991 CEST	443	64115	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.879336119 CEST	64115	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.879369020 CEST	443	64115	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.882733107 CEST	64115	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.882740021 CEST	443	64115	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.885620117 CEST	443	64116	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.886746883 CEST	64116	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.886746883 CEST	64116	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.886758089 CEST	443	64116	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.886774063 CEST	443	64116	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.897193909 CEST	443	64117	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.897928953 CEST	64117	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.897944927 CEST	443	64117	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.899036884 CEST	64117	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.899041891 CEST	443	64117	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.907426119 CEST	443	64118	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.908318996 CEST	64118	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.908330917 CEST	443	64118	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.909728050 CEST	64118	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.909735918 CEST	443	64118	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.917726994 CEST	443	64119	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.918328047 CEST	64119	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.918348074 CEST	443	64119	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:34.921866894 CEST	64119	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:34.921870947 CEST	443	64119	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.015120983 CEST	443	64115	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.015196085 CEST	443	64115	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.017776012 CEST	64115	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.018517971 CEST	64115	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.018517971 CEST	64115	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.018553972 CEST	443	64115	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.018563986 CEST	443	64115	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.022979021 CEST	443	64116	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.023279905 CEST	443	64116	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.026154041 CEST	64116	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.030586958 CEST	64116	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.030586958 CEST	64116	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.030613899 CEST	443	64116	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.030631065 CEST	443	64116	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.034564018 CEST	443	64117	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.034712076 CEST	443	64117	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.034853935 CEST	64117	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.042485952 CEST	64117	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.042485952 CEST	64117	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.042521954 CEST	443	64117	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.042540073 CEST	443	64117	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.049015999 CEST	443	64118	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.049082041 CEST	443	64118	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.049335003 CEST	64118	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.055354118 CEST	443	64119	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.055550098 CEST	443	64119	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.055814981 CEST	64119	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.056391001 CEST	64120	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.056430101 CEST	443	64120	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.059699059 CEST	64120	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.078294039 CEST	64121	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.078327894 CEST	443	64121	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.078397989 CEST	64121	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.078459024 CEST	64118	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.078474045 CEST	443	64118	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.111560106 CEST	64121	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.111598015 CEST	443	64121	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.123377085 CEST	64119	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.123377085 CEST	64119	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.123408079 CEST	443	64119	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.123425007 CEST	443	64119	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.123809099 CEST	64120	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.123809099 CEST	64122	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.123842001 CEST	443	64120	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.123871088 CEST	443	64122	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.124603987 CEST	64122	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.124736071 CEST	64122	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.124743938 CEST	443	64122	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.125037909 CEST	64123	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.125070095 CEST	443	64123	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.125302076 CEST	64123	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.125946045 CEST	64123	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.125957966 CEST	443	64123	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.127111912 CEST	64124	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.127146006 CEST	443	64124	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.127749920 CEST	64124	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.131552935 CEST	64124	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.131568909 CEST	443	64124	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.867989063 CEST	443	64121	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.868628025 CEST	64121	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.868666887 CEST	443	64121	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.869138956 CEST	64121	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.869143963 CEST	443	64121	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.877370119 CEST	443	64122	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.877887011 CEST	64122	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.877922058 CEST	443	64122	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.878470898 CEST	64122	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.878475904 CEST	443	64122	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.881879091 CEST	443	64124	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.882093906 CEST	443	64120	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.882320881 CEST	64124	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.882343054 CEST	443	64124	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.882472992 CEST	64120	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.882482052 CEST	443	64120	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.882823944 CEST	64124	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.882829905 CEST	443	64124	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.883182049 CEST	64120	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.883186102 CEST	443	64120	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.942365885 CEST	443	64123	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.943595886 CEST	64123	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.943595886 CEST	64123	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:35.943625927 CEST	443	64123	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:35.943644047 CEST	443	64123	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.005204916 CEST	443	64121	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.005278111 CEST	443	64121	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.005336046 CEST	64121	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.005575895 CEST	64121	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.005600929 CEST	443	64121	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.005613089 CEST	64121	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.005619049 CEST	443	64121	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.009110928 CEST	64125	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.009223938 CEST	443	64125	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.009309053 CEST	64125	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.009602070 CEST	64125	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.009639978 CEST	443	64125	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.015403032 CEST	443	64122	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.015465975 CEST	443	64122	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.015533924 CEST	64122	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.015698910 CEST	64122	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.015717983 CEST	443	64122	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.015744925 CEST	64122	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.015750885 CEST	443	64122	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.018297911 CEST	443	64124	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.018441916 CEST	443	64124	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.018506050 CEST	64124	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.018543959 CEST	64124	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.018543959 CEST	64124	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.018558025 CEST	443	64124	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.018565893 CEST	443	64124	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.018887043 CEST	443	64120	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.019237995 CEST	64126	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.019262075 CEST	443	64126	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.019268990 CEST	443	64120	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.019337893 CEST	64126	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.019476891 CEST	64120	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.019476891 CEST	64120	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.019522905 CEST	64120	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.019527912 CEST	443	64120	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.019803047 CEST	64126	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.019817114 CEST	443	64126	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.021487951 CEST	64127	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.021528006 CEST	443	64127	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.021600008 CEST	64127	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.021761894 CEST	64127	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.021791935 CEST	443	64127	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.022090912 CEST	64128	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.022111893 CEST	443	64128	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.022171974 CEST	64128	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.022279024 CEST	64128	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.022293091 CEST	443	64128	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.079042912 CEST	443	64123	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.079494953 CEST	443	64123	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.079566956 CEST	64123	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.079632998 CEST	64123	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.079653025 CEST	443	64123	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.079665899 CEST	64123	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.079672098 CEST	443	64123	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.082842112 CEST	64129	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.082870960 CEST	443	64129	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.082945108 CEST	64129	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.083136082 CEST	64129	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.083149910 CEST	443	64129	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.770525932 CEST	443	64127	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.771161079 CEST	64127	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.771209955 CEST	443	64127	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.771852970 CEST	64127	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.771861076 CEST	443	64127	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.772671938 CEST	443	64126	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.773271084 CEST	64126	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.773303032 CEST	443	64126	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.773801088 CEST	64126	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.773808002 CEST	443	64126	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.779048920 CEST	443	64125	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.779481888 CEST	64125	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.779515028 CEST	443	64125	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.780016899 CEST	64125	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.780025959 CEST	443	64125	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.796150923 CEST	443	64128	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.796564102 CEST	64128	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.796581030 CEST	443	64128	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.797048092 CEST	64128	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.797054052 CEST	443	64128	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.858270884 CEST	443	64129	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.858831882 CEST	64129	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.858871937 CEST	443	64129	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.859677076 CEST	64129	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.859683037 CEST	443	64129	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.906021118 CEST	443	64127	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.906163931 CEST	443	64127	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.906240940 CEST	64127	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.906459093 CEST	64127	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.906502962 CEST	443	64127	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.906529903 CEST	64127	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.906547070 CEST	443	64127	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.909116030 CEST	443	64126	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.909333944 CEST	443	64126	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.909394026 CEST	64126	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.909492970 CEST	64126	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.909517050 CEST	443	64126	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.909533024 CEST	64126	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.909539938 CEST	443	64126	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.910059929 CEST	64130	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.910092115 CEST	443	64130	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.910415888 CEST	64130	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.910609007 CEST	64130	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.910617113 CEST	443	64130	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.912255049 CEST	64131	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.912291050 CEST	443	64131	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.912483931 CEST	64131	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.912637949 CEST	64131	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.912651062 CEST	443	64131	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.920608044 CEST	443	64125	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.920857906 CEST	443	64125	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.920959949 CEST	64125	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.920999050 CEST	64125	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.920999050 CEST	64125	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.921019077 CEST	443	64125	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.921040058 CEST	443	64125	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.923403978 CEST	64132	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.923424959 CEST	443	64132	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.923562050 CEST	64132	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.923732996 CEST	64132	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.923744917 CEST	443	64132	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.935137033 CEST	443	64128	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.935271025 CEST	443	64128	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.935451031 CEST	64128	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.935473919 CEST	64128	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.935484886 CEST	443	64128	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.935499907 CEST	64128	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.935504913 CEST	443	64128	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.937812090 CEST	64133	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.937865019 CEST	443	64133	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:36.937946081 CEST	64133	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.938160896 CEST	64133	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:36.938193083 CEST	443	64133	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.002614975 CEST	443	64129	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.002702951 CEST	443	64129	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.002784967 CEST	64129	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.002886057 CEST	64129	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.002897024 CEST	443	64129	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.002903938 CEST	64129	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.002908945 CEST	443	64129	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.005413055 CEST	64134	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.005450010 CEST	443	64134	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.005525112 CEST	64134	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.005697012 CEST	64134	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.005713940 CEST	443	64134	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.672270060 CEST	443	64131	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.672866106 CEST	64131	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.672890902 CEST	443	64131	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.672926903 CEST	443	64130	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.673224926 CEST	64130	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.673237085 CEST	443	64130	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.673433065 CEST	64131	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.673438072 CEST	443	64131	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.673825979 CEST	64130	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.673830986 CEST	443	64130	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.679795027 CEST	443	64132	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.680247068 CEST	64132	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.680274963 CEST	443	64132	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.680762053 CEST	64132	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.680768967 CEST	443	64132	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.690887928 CEST	443	64133	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.691220999 CEST	64133	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.691258907 CEST	443	64133	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.691612005 CEST	64133	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.691617966 CEST	443	64133	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.810549974 CEST	443	64131	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.810617924 CEST	443	64131	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.810688019 CEST	64131	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.810951948 CEST	64131	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.810975075 CEST	443	64131	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.810988903 CEST	64131	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.810996056 CEST	443	64131	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.811908960 CEST	443	64130	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.811961889 CEST	443	64130	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.812010050 CEST	64130	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.812186003 CEST	64130	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.812196970 CEST	443	64130	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.812207937 CEST	64130	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.812212944 CEST	443	64130	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.814708948 CEST	64135	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.814796925 CEST	64136	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.814819098 CEST	443	64135	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.814826965 CEST	443	64136	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.814913034 CEST	64136	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.814923048 CEST	64135	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.815156937 CEST	64135	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.815191031 CEST	64136	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.815198898 CEST	443	64135	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.815203905 CEST	443	64136	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.816854954 CEST	443	64132	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.816926003 CEST	443	64132	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.817110062 CEST	64132	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.817230940 CEST	64132	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.817248106 CEST	443	64132	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.817260981 CEST	64132	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.817266941 CEST	443	64132	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.819920063 CEST	64137	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.819977999 CEST	443	64137	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.820184946 CEST	64137	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.820317030 CEST	64137	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.820336103 CEST	443	64137	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.826984882 CEST	443	64133	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.827060938 CEST	443	64133	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.827227116 CEST	64133	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.827274084 CEST	64133	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.827274084 CEST	64133	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.827301979 CEST	443	64133	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.827342987 CEST	443	64133	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.829622030 CEST	64138	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.829642057 CEST	443	64138	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.829718113 CEST	64138	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.829819918 CEST	64138	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.829834938 CEST	443	64138	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.983515978 CEST	443	64134	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.984226942 CEST	64134	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.984270096 CEST	443	64134	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:37.984761000 CEST	64134	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:37.984769106 CEST	443	64134	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.131643057 CEST	443	64134	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.131719112 CEST	443	64134	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.131844997 CEST	64134	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.132059097 CEST	64134	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.132082939 CEST	443	64134	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.132101059 CEST	64134	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.132108927 CEST	443	64134	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.136009932 CEST	64139	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.136048079 CEST	443	64139	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.136127949 CEST	64139	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.136356115 CEST	64139	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.136369944 CEST	443	64139	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.570617914 CEST	443	64136	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.571127892 CEST	443	64135	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.571218014 CEST	64136	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.571229935 CEST	443	64136	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.571619987 CEST	64135	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.571646929 CEST	443	64135	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.571903944 CEST	64136	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.571907043 CEST	443	64136	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.572268009 CEST	64135	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.572274923 CEST	443	64135	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.573545933 CEST	443	64137	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.573890924 CEST	64137	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.573915005 CEST	443	64137	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.574410915 CEST	64137	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.574424982 CEST	443	64137	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.579649925 CEST	443	64138	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.580024958 CEST	64138	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.580038071 CEST	443	64138	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.580540895 CEST	64138	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.580544949 CEST	443	64138	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.707788944 CEST	443	64135	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.707865953 CEST	443	64135	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.708102942 CEST	64135	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.708323956 CEST	64135	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.708344936 CEST	443	64135	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.708359003 CEST	64135	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.708367109 CEST	443	64135	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.708983898 CEST	443	64136	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.709424019 CEST	443	64136	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.709481001 CEST	64136	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.710253000 CEST	64136	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.710262060 CEST	443	64136	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.710284948 CEST	64136	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.710289955 CEST	443	64136	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.710985899 CEST	443	64137	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.711353064 CEST	443	64137	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.711468935 CEST	64137	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.712032080 CEST	64137	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.712055922 CEST	443	64137	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.712080002 CEST	64137	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.712088108 CEST	443	64137	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.715223074 CEST	64140	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.715253115 CEST	443	64140	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.715321064 CEST	64140	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.715652943 CEST	64140	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.715667009 CEST	443	64140	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.716747999 CEST	64141	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.716759920 CEST	443	64141	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.716970921 CEST	64141	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.717258930 CEST	64141	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.717269897 CEST	443	64141	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.718710899 CEST	64142	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.718730927 CEST	443	64142	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.718854904 CEST	64142	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.719185114 CEST	64142	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.719197035 CEST	443	64142	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.891309977 CEST	443	64139	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.892954111 CEST	64139	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.892971039 CEST	443	64139	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.894049883 CEST	64139	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.894068003 CEST	443	64139	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.936165094 CEST	443	64138	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.936322927 CEST	443	64138	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.936417103 CEST	64138	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.936984062 CEST	64138	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.936992884 CEST	443	64138	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.937025070 CEST	64138	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.937030077 CEST	443	64138	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.946718931 CEST	64143	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.946763039 CEST	443	64143	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:38.946846008 CEST	64143	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.947123051 CEST	64143	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:38.947135925 CEST	443	64143	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.026494980 CEST	443	64139	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.026565075 CEST	443	64139	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.026721001 CEST	64139	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.027159929 CEST	64139	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.027184010 CEST	443	64139	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.027234077 CEST	64139	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.027240038 CEST	443	64139	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.035342932 CEST	64144	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.035376072 CEST	443	64144	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.035605907 CEST	64144	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.035974979 CEST	64144	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.035989046 CEST	443	64144	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.478638887 CEST	443	64142	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.479378939 CEST	443	64141	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.480525970 CEST	64142	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.480536938 CEST	443	64142	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.482290030 CEST	64142	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.482294083 CEST	443	64142	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.483128071 CEST	64141	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.483140945 CEST	443	64141	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.484021902 CEST	64141	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.484028101 CEST	443	64141	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.489078045 CEST	443	64140	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.489619017 CEST	64140	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.489631891 CEST	443	64140	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.490923882 CEST	64140	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.490928888 CEST	443	64140	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.617086887 CEST	443	64142	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.617389917 CEST	443	64142	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.617501020 CEST	64142	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.617857933 CEST	443	64141	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.618683100 CEST	443	64141	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.618746996 CEST	64141	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.620491982 CEST	64142	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.620507002 CEST	443	64142	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.622355938 CEST	64141	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.622370005 CEST	443	64141	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.622379065 CEST	64141	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.622384071 CEST	443	64141	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.629050970 CEST	443	64140	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.629621029 CEST	443	64140	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.629698992 CEST	64140	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.634113073 CEST	64145	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.634152889 CEST	443	64145	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.634458065 CEST	64145	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.635535955 CEST	64146	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.635574102 CEST	443	64146	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.635657072 CEST	64146	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.635924101 CEST	64140	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.635930061 CEST	443	64140	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.636245966 CEST	64146	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.636262894 CEST	443	64146	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.638858080 CEST	64145	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.638876915 CEST	443	64145	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.640835047 CEST	64147	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.640856028 CEST	443	64147	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.641305923 CEST	64147	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.642960072 CEST	64147	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.642973900 CEST	443	64147	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.661546946 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:39.661567926 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:39.661622047 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:39.662585020 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:39.662597895 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:39.718349934 CEST	443	64143	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.719337940 CEST	64143	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.719353914 CEST	443	64143	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.720134974 CEST	64143	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.720149040 CEST	443	64143	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.796744108 CEST	443	64144	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.797710896 CEST	64144	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.797710896 CEST	64144	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.797729015 CEST	443	64144	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.797744036 CEST	443	64144	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.858993053 CEST	443	64143	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.859060049 CEST	443	64143	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.859286070 CEST	64143	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.859358072 CEST	64143	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.859358072 CEST	64143	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.859373093 CEST	443	64143	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.859383106 CEST	443	64143	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.862580061 CEST	64149	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.862613916 CEST	443	64149	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.862761021 CEST	64149	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.862867117 CEST	64149	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.862879038 CEST	443	64149	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.934727907 CEST	443	64144	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.934895039 CEST	443	64144	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.935059071 CEST	64144	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.935137033 CEST	64144	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.935137033 CEST	64144	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.935158014 CEST	443	64144	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.935167074 CEST	443	64144	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.938522100 CEST	64150	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.938551903 CEST	443	64150	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:39.938626051 CEST	64150	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.938853025 CEST	64150	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:39.938867092 CEST	443	64150	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.387563944 CEST	443	64145	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.388942957 CEST	64145	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.388952971 CEST	443	64145	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.390700102 CEST	64145	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.390705109 CEST	443	64145	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.391062975 CEST	443	64147	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.391782999 CEST	64147	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.391789913 CEST	443	64147	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.392436028 CEST	64147	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.392441034 CEST	443	64147	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.400424004 CEST	443	64146	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.400870085 CEST	64146	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.400886059 CEST	443	64146	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.401607990 CEST	64146	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.401623964 CEST	443	64146	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.524568081 CEST	443	64145	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.524914026 CEST	443	64145	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.524985075 CEST	64145	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.527750015 CEST	443	64147	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.527944088 CEST	443	64147	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.527992964 CEST	64147	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.529444933 CEST	64145	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.529453993 CEST	443	64145	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.529501915 CEST	64145	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.529508114 CEST	443	64145	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.532202005 CEST	64147	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.532207966 CEST	443	64147	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.537103891 CEST	64151	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.537132978 CEST	443	64151	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.537192106 CEST	64151	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.539331913 CEST	64151	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.539345980 CEST	443	64151	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.539654016 CEST	64152	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.539673090 CEST	443	64152	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.539736986 CEST	64152	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.539769888 CEST	443	64146	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.539844990 CEST	443	64146	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.539925098 CEST	64146	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.540204048 CEST	64152	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.540216923 CEST	443	64152	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.540956020 CEST	64146	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.540956020 CEST	64146	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.540973902 CEST	443	64146	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.540982008 CEST	443	64146	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.544567108 CEST	64153	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.544606924 CEST	443	64153	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.544687033 CEST	64153	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.544967890 CEST	64153	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.544991970 CEST	443	64153	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.626970053 CEST	443	64149	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.635005951 CEST	64149	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.635027885 CEST	443	64149	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.653675079 CEST	64149	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.653681993 CEST	443	64149	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.694911003 CEST	443	64150	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.715645075 CEST	64150	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.715666056 CEST	443	64150	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.733967066 CEST	64150	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.733975887 CEST	443	64150	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.775574923 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:40.775671959 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:40.778099060 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:40.778105021 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:40.778343916 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:40.785669088 CEST	443	64149	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.785793066 CEST	443	64149	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.785903931 CEST	64149	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.791907072 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:40.793076038 CEST	64149	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.793076038 CEST	64149	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.793092012 CEST	443	64149	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.793101072 CEST	443	64149	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.796982050 CEST	64154	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.797022104 CEST	443	64154	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.797115088 CEST	64154	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.797379971 CEST	64154	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.797396898 CEST	443	64154	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.839334011 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:40.867819071 CEST	443	64150	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.868376017 CEST	443	64150	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.868433952 CEST	64150	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.868460894 CEST	64150	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.868478060 CEST	443	64150	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.868489981 CEST	64150	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.868496895 CEST	443	64150	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.871927023 CEST	64155	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.871965885 CEST	443	64155	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:40.872212887 CEST	64155	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.872505903 CEST	64155	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:40.872520924 CEST	443	64155	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.167165041 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:41.167232037 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:41.167273998 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:41.167316914 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:41.167330027 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:41.167355061 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:41.167391062 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:41.284437895 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:41.284555912 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:41.284571886 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:41.284631014 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:41.284889936 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:41.284895897 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:41.285034895 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:41.285279989 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:41.285375118 CEST	443	64148	4.175.87.197	192.168.2.4
Oct 24, 2024 18:16:41.285595894 CEST	64148	443	192.168.2.4	4.175.87.197
Oct 24, 2024 18:16:41.296066999 CEST	443	64151	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.305109024 CEST	443	64152	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.307444096 CEST	443	64153	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.313749075 CEST	64151	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.313759089 CEST	443	64151	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.315207958 CEST	64151	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.315212965 CEST	443	64151	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.315654039 CEST	64152	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.315685987 CEST	443	64152	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.316498041 CEST	64152	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.316507101 CEST	443	64152	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.317501068 CEST	64153	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.317517042 CEST	443	64153	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.318236113 CEST	64153	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.318240881 CEST	443	64153	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.450119972 CEST	443	64151	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.450172901 CEST	443	64151	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.450265884 CEST	64151	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.450417995 CEST	64151	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.450417995 CEST	64151	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.450433016 CEST	443	64151	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.450443029 CEST	443	64151	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.451936007 CEST	443	64153	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.452097893 CEST	443	64153	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.452312946 CEST	64153	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.452327967 CEST	443	64152	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.452436924 CEST	64153	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.452446938 CEST	443	64153	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.452457905 CEST	64153	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.452462912 CEST	443	64153	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.453185081 CEST	443	64152	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.453249931 CEST	64152	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.453393936 CEST	64156	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.453408003 CEST	64152	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.453421116 CEST	443	64152	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.453460932 CEST	64152	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.453466892 CEST	443	64152	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.453514099 CEST	443	64156	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.453579903 CEST	64156	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.454524040 CEST	64156	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.454564095 CEST	443	64156	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.455846071 CEST	64157	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.455874920 CEST	443	64157	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.455931902 CEST	64157	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.456046104 CEST	64157	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.456059933 CEST	443	64157	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.456316948 CEST	64158	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.456341028 CEST	443	64158	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.456413984 CEST	64158	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.456547022 CEST	64158	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.456573963 CEST	443	64158	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.566116095 CEST	443	64154	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.566622019 CEST	64154	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.566638947 CEST	443	64154	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.567127943 CEST	64154	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.567133904 CEST	443	64154	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.627161026 CEST	443	64155	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.627540112 CEST	64155	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.627556086 CEST	443	64155	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.627979994 CEST	64155	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.627985954 CEST	443	64155	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.707004070 CEST	443	64154	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.707215071 CEST	443	64154	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.707289934 CEST	64154	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.707392931 CEST	64154	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.707412004 CEST	443	64154	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.707422018 CEST	64154	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.707427025 CEST	443	64154	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.710588932 CEST	64159	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.710628986 CEST	443	64159	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.710696936 CEST	64159	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.710890055 CEST	64159	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.710901976 CEST	443	64159	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.761154890 CEST	443	64155	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.761488914 CEST	443	64155	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.761554003 CEST	64155	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.761606932 CEST	64155	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.761624098 CEST	443	64155	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.761632919 CEST	64155	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.761637926 CEST	443	64155	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.764045000 CEST	64160	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.764089108 CEST	443	64160	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:41.764210939 CEST	64160	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.764355898 CEST	64160	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:41.764375925 CEST	443	64160	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.194583893 CEST	443	64156	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.195911884 CEST	64156	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.195962906 CEST	443	64156	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.197201014 CEST	64156	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.197217941 CEST	443	64156	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.203268051 CEST	443	64158	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.203423023 CEST	443	64157	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.204762936 CEST	64158	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.204802990 CEST	443	64158	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.206604958 CEST	64158	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.206619024 CEST	443	64158	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.207931042 CEST	64157	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.207947969 CEST	443	64157	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.210150003 CEST	64157	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.210155010 CEST	443	64157	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.336838007 CEST	443	64156	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.336903095 CEST	443	64156	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.336987972 CEST	64156	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.337373972 CEST	443	64158	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.337723017 CEST	443	64158	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.337801933 CEST	64158	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.342592955 CEST	64156	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.342628956 CEST	443	64156	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.342844963 CEST	443	64157	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.342924118 CEST	443	64157	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.342972994 CEST	64157	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.345386982 CEST	64157	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.345407963 CEST	443	64157	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.345419884 CEST	64157	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.345426083 CEST	443	64157	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.346822023 CEST	64158	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.346851110 CEST	443	64158	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.346873999 CEST	64158	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.346889973 CEST	443	64158	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.354079008 CEST	64161	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.354125023 CEST	443	64161	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.354237080 CEST	64161	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.355187893 CEST	64162	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.355231047 CEST	443	64162	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.355297089 CEST	64162	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.356734037 CEST	64163	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.356743097 CEST	443	64163	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.356817007 CEST	64163	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.357027054 CEST	64161	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.357039928 CEST	443	64161	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.357763052 CEST	64162	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.357794046 CEST	443	64162	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.357825994 CEST	64163	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.357836008 CEST	443	64163	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.484819889 CEST	443	64159	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.485476017 CEST	64159	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.485498905 CEST	443	64159	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.486201048 CEST	64159	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.486208916 CEST	443	64159	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.513979912 CEST	443	64160	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.514448881 CEST	64160	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.514471054 CEST	443	64160	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.515098095 CEST	64160	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.515103102 CEST	443	64160	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.637768984 CEST	443	64159	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.638366938 CEST	443	64159	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.638422012 CEST	64159	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.648736000 CEST	443	64160	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.649373055 CEST	443	64160	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.649447918 CEST	64160	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.653259993 CEST	64159	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.653275013 CEST	443	64159	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.653285980 CEST	64159	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.653290987 CEST	443	64159	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.655695915 CEST	64160	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.655695915 CEST	64160	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.655716896 CEST	443	64160	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.655725002 CEST	443	64160	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.707042933 CEST	64164	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.707084894 CEST	443	64164	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.707164049 CEST	64164	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.713994980 CEST	64165	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.714027882 CEST	443	64165	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.714080095 CEST	64165	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.714922905 CEST	64164	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.714941978 CEST	443	64164	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:42.715531111 CEST	64165	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:42.715540886 CEST	443	64165	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.109386921 CEST	443	64161	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.110042095 CEST	64161	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.110058069 CEST	443	64161	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.110626936 CEST	64161	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.110631943 CEST	443	64161	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.132112980 CEST	443	64162	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.132641077 CEST	64162	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.132668972 CEST	443	64162	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.133094072 CEST	443	64163	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.133111954 CEST	64162	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.133119106 CEST	443	64162	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.133429050 CEST	64163	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.133440971 CEST	443	64163	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.133934975 CEST	64163	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.133939028 CEST	443	64163	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.256156921 CEST	443	64161	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.256294012 CEST	443	64161	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.256354094 CEST	64161	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.256494999 CEST	64161	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.256510973 CEST	443	64161	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.256520987 CEST	64161	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.256525993 CEST	443	64161	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.259736061 CEST	64166	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.259778023 CEST	443	64166	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.259845018 CEST	64166	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.260023117 CEST	64166	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.260039091 CEST	443	64166	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.269028902 CEST	443	64162	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.269220114 CEST	443	64162	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.269303083 CEST	64162	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.269303083 CEST	64162	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.269339085 CEST	64162	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.269354105 CEST	443	64162	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.272949934 CEST	443	64163	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.273077011 CEST	443	64163	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.273125887 CEST	64163	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.273705006 CEST	64163	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.273713112 CEST	443	64163	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.275717974 CEST	64167	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.275748014 CEST	443	64167	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.275845051 CEST	64167	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.278306007 CEST	64167	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.278318882 CEST	443	64167	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.281593084 CEST	64168	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.281619072 CEST	443	64168	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.281742096 CEST	64168	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.282057047 CEST	64168	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.282069921 CEST	443	64168	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.460149050 CEST	443	64165	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.460664988 CEST	64165	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.460679054 CEST	443	64165	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.461195946 CEST	64165	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.461199999 CEST	443	64165	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.469742060 CEST	443	64164	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.470114946 CEST	64164	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.470133066 CEST	443	64164	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.470562935 CEST	64164	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.470567942 CEST	443	64164	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.595464945 CEST	443	64165	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.595532894 CEST	443	64165	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.595609903 CEST	64165	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.595879078 CEST	64165	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.595895052 CEST	443	64165	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.595905066 CEST	64165	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.595911980 CEST	443	64165	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.599375963 CEST	64169	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.599417925 CEST	443	64169	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.599530935 CEST	64169	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.599672079 CEST	64169	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.599684000 CEST	443	64169	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.606820107 CEST	443	64164	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.606988907 CEST	443	64164	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.607057095 CEST	64164	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.607084990 CEST	64164	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.607105017 CEST	443	64164	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.607124090 CEST	64164	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.607129097 CEST	443	64164	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.609498024 CEST	64170	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.609513044 CEST	443	64170	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:43.609592915 CEST	64170	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.609802008 CEST	64170	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:43.609814882 CEST	443	64170	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.200119019 CEST	443	64166	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.200689077 CEST	64166	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.200727940 CEST	443	64166	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.201200008 CEST	64166	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.201206923 CEST	443	64166	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.204018116 CEST	443	64167	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.204055071 CEST	443	64168	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.204484940 CEST	64167	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.204495907 CEST	443	64167	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.204600096 CEST	64168	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.204612970 CEST	443	64168	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.205012083 CEST	64167	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.205015898 CEST	443	64167	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.205321074 CEST	64168	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.205326080 CEST	443	64168	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.336697102 CEST	443	64166	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.337241888 CEST	443	64166	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.337352991 CEST	64166	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.337352991 CEST	64166	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.337380886 CEST	64166	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.337398052 CEST	443	64166	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.340430975 CEST	64171	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.340464115 CEST	443	64171	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.340739965 CEST	64171	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.340945959 CEST	64171	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.340954065 CEST	443	64171	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.342343092 CEST	443	64167	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.342919111 CEST	443	64167	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.343058109 CEST	64167	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.343162060 CEST	64167	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.343162060 CEST	64167	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.343178988 CEST	443	64167	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.343188047 CEST	443	64167	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.343895912 CEST	443	64168	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.344074011 CEST	443	64168	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.344125986 CEST	64168	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.344146967 CEST	64168	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.344160080 CEST	443	64168	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.344172001 CEST	64168	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.344177008 CEST	443	64168	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.345591068 CEST	64172	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.345655918 CEST	443	64172	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.345746994 CEST	64172	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.345951080 CEST	64172	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.345972061 CEST	443	64172	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.346143961 CEST	64173	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.346179962 CEST	443	64173	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.346250057 CEST	64173	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.346337080 CEST	64173	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.346349955 CEST	443	64173	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.348093033 CEST	443	64169	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.348627090 CEST	64169	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.348645926 CEST	443	64169	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.349498987 CEST	64169	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.349503040 CEST	443	64169	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.371639967 CEST	443	64170	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.372035027 CEST	64170	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.372045040 CEST	443	64170	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.372450113 CEST	64170	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.372454882 CEST	443	64170	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.483153105 CEST	443	64169	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.483330011 CEST	443	64169	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.483402967 CEST	64169	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.483587027 CEST	64169	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.483599901 CEST	443	64169	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.483608961 CEST	64169	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.483614922 CEST	443	64169	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.486888885 CEST	64174	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.486951113 CEST	443	64174	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.487026930 CEST	64174	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.487226963 CEST	64174	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.487251997 CEST	443	64174	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.509886026 CEST	443	64170	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.510080099 CEST	443	64170	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.510180950 CEST	64170	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.510221958 CEST	64170	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.510240078 CEST	443	64170	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.510251045 CEST	64170	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.510256052 CEST	443	64170	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.512629986 CEST	64175	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.512717962 CEST	443	64175	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:44.512808084 CEST	64175	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.512974024 CEST	64175	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:44.512989044 CEST	443	64175	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.097448111 CEST	443	64172	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.097990990 CEST	64172	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.098026991 CEST	443	64172	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.099502087 CEST	64172	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.099509001 CEST	443	64172	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.155690908 CEST	443	64173	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.156162024 CEST	64173	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.156188011 CEST	443	64173	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.156635046 CEST	64173	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.156639099 CEST	443	64173	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.235142946 CEST	443	64172	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.235301971 CEST	443	64172	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.235374928 CEST	64172	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.235506058 CEST	64172	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.235538006 CEST	443	64172	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.235565901 CEST	64172	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.235579967 CEST	443	64172	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.238733053 CEST	64176	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.238753080 CEST	443	64176	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.238827944 CEST	64176	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.239010096 CEST	64176	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.239020109 CEST	443	64176	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.292885065 CEST	443	64174	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.293265104 CEST	64174	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.293284893 CEST	443	64174	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.293705940 CEST	64174	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.293711901 CEST	443	64174	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.295809031 CEST	443	64175	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.296195030 CEST	64175	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.296211958 CEST	443	64175	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.296590090 CEST	64175	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.296596050 CEST	443	64175	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.297801971 CEST	443	64173	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.297894955 CEST	443	64173	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.298059940 CEST	64173	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.298086882 CEST	64173	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.298095942 CEST	443	64173	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.298106909 CEST	64173	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.298111916 CEST	443	64173	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.300690889 CEST	64177	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.300709009 CEST	443	64177	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.300776958 CEST	64177	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.300934076 CEST	64177	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.300945044 CEST	443	64177	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.321799994 CEST	443	64171	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.322175026 CEST	64171	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.322189093 CEST	443	64171	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.322582960 CEST	64171	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.322588921 CEST	443	64171	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.431883097 CEST	443	64175	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.432048082 CEST	443	64175	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.432104111 CEST	443	64174	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.432133913 CEST	64175	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.432380915 CEST	443	64174	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.434283018 CEST	64174	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.434746981 CEST	64175	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.434771061 CEST	443	64175	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.434782028 CEST	64174	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.434783936 CEST	64175	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.434789896 CEST	443	64175	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.434811115 CEST	443	64174	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.437859058 CEST	64178	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.437875986 CEST	64179	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.437901020 CEST	443	64178	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.437912941 CEST	443	64179	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.437963009 CEST	64178	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.437985897 CEST	64179	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.438147068 CEST	64178	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.438162088 CEST	443	64178	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.438278913 CEST	64179	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.438292027 CEST	443	64179	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.460131884 CEST	443	64171	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.461755037 CEST	443	64171	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.461818933 CEST	64171	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.461848974 CEST	64171	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.461858988 CEST	443	64171	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.461873055 CEST	64171	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.461879015 CEST	443	64171	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.464261055 CEST	64180	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.464281082 CEST	443	64180	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.464356899 CEST	64180	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.464457989 CEST	64180	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.464469910 CEST	443	64180	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.994116068 CEST	443	64176	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.994709015 CEST	64176	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.994724035 CEST	443	64176	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:45.995269060 CEST	64176	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:45.995274067 CEST	443	64176	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.052011967 CEST	443	64177	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.052405119 CEST	64177	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.052427053 CEST	443	64177	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.052829027 CEST	64177	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.052834034 CEST	443	64177	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.139683008 CEST	443	64176	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.139810085 CEST	443	64176	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.139998913 CEST	64176	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.140063047 CEST	64176	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.140079021 CEST	443	64176	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.140088081 CEST	64176	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.140093088 CEST	443	64176	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.143305063 CEST	64181	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.143369913 CEST	443	64181	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.143536091 CEST	64181	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.143711090 CEST	64181	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.143744946 CEST	443	64181	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.187818050 CEST	443	64179	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.188299894 CEST	64179	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.188314915 CEST	443	64179	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.188815117 CEST	64179	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.188819885 CEST	443	64179	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.189953089 CEST	443	64177	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.190058947 CEST	443	64177	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.190118074 CEST	64177	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.190280914 CEST	64177	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.190294027 CEST	443	64177	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.190327883 CEST	64177	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.190332890 CEST	443	64177	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.193438053 CEST	64182	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.193476915 CEST	443	64182	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.193572998 CEST	64182	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.193677902 CEST	64182	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.193686008 CEST	443	64182	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.204031944 CEST	443	64180	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.204417944 CEST	64180	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.204433918 CEST	443	64180	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.204917908 CEST	64180	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.204924107 CEST	443	64180	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.211045027 CEST	443	64178	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.211505890 CEST	64178	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.211520910 CEST	443	64178	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.211914062 CEST	64178	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.211919069 CEST	443	64178	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.324922085 CEST	443	64179	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.324990034 CEST	443	64179	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.325058937 CEST	64179	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.325278997 CEST	64179	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.325299025 CEST	443	64179	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.325313091 CEST	64179	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.325319052 CEST	443	64179	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.328599930 CEST	64183	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.328708887 CEST	443	64183	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.328792095 CEST	64183	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.328962088 CEST	64183	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.328999996 CEST	443	64183	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.342350960 CEST	443	64180	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.342410088 CEST	443	64180	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.342464924 CEST	64180	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.342672110 CEST	64180	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.342672110 CEST	64180	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.342685938 CEST	443	64180	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.342694044 CEST	443	64180	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.345371008 CEST	64184	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.345402956 CEST	443	64184	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.345673084 CEST	64184	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.345814943 CEST	64184	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.345822096 CEST	443	64184	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.349844933 CEST	443	64178	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.349999905 CEST	443	64178	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.350060940 CEST	64178	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.350121975 CEST	64178	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.350131035 CEST	443	64178	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.352407932 CEST	64185	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.352447033 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.352549076 CEST	64185	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.352763891 CEST	64185	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.352790117 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.903904915 CEST	443	64181	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.905191898 CEST	64181	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.905275106 CEST	443	64181	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.906203985 CEST	64181	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.906219006 CEST	443	64181	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.943456888 CEST	443	64182	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.943994999 CEST	64182	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.944020033 CEST	443	64182	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:46.944725037 CEST	64182	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:46.944730997 CEST	443	64182	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.043492079 CEST	443	64181	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.043518066 CEST	443	64181	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.043585062 CEST	64181	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.043620110 CEST	443	64181	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.043792963 CEST	443	64181	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.043850899 CEST	64181	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.044102907 CEST	64181	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.044135094 CEST	443	64181	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.048703909 CEST	64187	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.048758030 CEST	443	64187	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.048866034 CEST	64187	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.049017906 CEST	64187	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.049036026 CEST	443	64187	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.078869104 CEST	443	64182	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.078932047 CEST	443	64182	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.079004049 CEST	64182	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.079399109 CEST	64182	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.079416037 CEST	443	64182	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.079441071 CEST	64182	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.079446077 CEST	443	64182	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.084994078 CEST	64188	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.085028887 CEST	443	64188	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.085146904 CEST	64188	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.085309982 CEST	64188	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.085320950 CEST	443	64188	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.095860958 CEST	443	64183	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.096657991 CEST	64183	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.096692085 CEST	443	64183	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.100590944 CEST	443	64184	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.100900888 CEST	64183	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.100915909 CEST	443	64183	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.101500988 CEST	64184	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.101525068 CEST	443	64184	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.102149963 CEST	64184	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.102154970 CEST	443	64184	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.134325027 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.154733896 CEST	64185	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.154772997 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.155776978 CEST	64185	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.155787945 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.235508919 CEST	443	64183	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.235702038 CEST	443	64183	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.235831976 CEST	64183	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.236305952 CEST	64183	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.236352921 CEST	443	64183	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.241432905 CEST	64189	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.241488934 CEST	443	64189	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.241570950 CEST	64189	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.242010117 CEST	64189	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.242042065 CEST	443	64189	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.259964943 CEST	443	64184	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.259985924 CEST	443	64184	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.260056973 CEST	64184	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.260078907 CEST	443	64184	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.260091066 CEST	443	64184	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.260127068 CEST	64184	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.260437965 CEST	64184	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.260451078 CEST	443	64184	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.263909101 CEST	64190	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.263936996 CEST	443	64190	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.264074087 CEST	64190	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.264528036 CEST	64190	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.264539957 CEST	443	64190	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.288909912 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.288969994 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.289186954 CEST	64185	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.289205074 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.289242983 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.289309978 CEST	64185	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.289560080 CEST	64185	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.289582968 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.289683104 CEST	64185	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.289690018 CEST	443	64185	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.293322086 CEST	64191	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.293359995 CEST	443	64191	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.293629885 CEST	64191	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.293833017 CEST	64191	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.293849945 CEST	443	64191	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.840240002 CEST	443	64188	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.840825081 CEST	64188	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.840837002 CEST	443	64188	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.841408968 CEST	64188	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.841413021 CEST	443	64188	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.975630999 CEST	443	64188	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.975929022 CEST	443	64188	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.975980043 CEST	64188	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.976664066 CEST	64188	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.976691008 CEST	443	64188	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.976701021 CEST	64188	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.976706982 CEST	443	64188	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.982397079 CEST	64192	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.982445002 CEST	443	64192	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:47.982702017 CEST	64192	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.983175039 CEST	64192	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:47.983198881 CEST	443	64192	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.006875038 CEST	443	64189	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.007473946 CEST	64189	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.007499933 CEST	443	64189	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.008452892 CEST	64189	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.008460045 CEST	443	64189	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.019962072 CEST	443	64190	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.020574093 CEST	64190	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.020582914 CEST	443	64190	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.021532059 CEST	64190	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.021537066 CEST	443	64190	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.047241926 CEST	443	64191	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.048012018 CEST	64191	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.048021078 CEST	443	64191	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.048876047 CEST	64191	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.048882008 CEST	443	64191	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.144646883 CEST	443	64189	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.144711971 CEST	443	64189	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.144802094 CEST	64189	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.156588078 CEST	443	64190	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.156639099 CEST	443	64190	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.156702995 CEST	64190	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.169889927 CEST	64189	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.169907093 CEST	443	64189	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.174649000 CEST	64190	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.174668074 CEST	443	64190	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.174688101 CEST	64190	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.174693108 CEST	443	64190	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.184679985 CEST	443	64191	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.184757948 CEST	443	64191	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.185055971 CEST	64191	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.186773062 CEST	64193	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.186806917 CEST	443	64193	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.186964035 CEST	64193	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.189275026 CEST	64194	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.189305067 CEST	443	64194	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.189361095 CEST	64194	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.189842939 CEST	64191	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.189860106 CEST	443	64191	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.189877033 CEST	64191	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.189882040 CEST	443	64191	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.192476034 CEST	64193	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.192486048 CEST	443	64193	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.192922115 CEST	64194	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.192934036 CEST	443	64194	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.196748972 CEST	64195	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.196760893 CEST	443	64195	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.196860075 CEST	64195	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.196963072 CEST	64195	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.196971893 CEST	443	64195	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.763964891 CEST	443	64192	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.764942884 CEST	64192	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.764970064 CEST	443	64192	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.766026020 CEST	64192	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.766032934 CEST	443	64192	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.902034998 CEST	443	64192	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.902127028 CEST	443	64192	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.902199984 CEST	64192	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.902442932 CEST	64192	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.902476072 CEST	443	64192	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.902488947 CEST	64192	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.902499914 CEST	443	64192	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.905288935 CEST	64196	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.905340910 CEST	443	64196	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:48.905507088 CEST	64196	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.905656099 CEST	64196	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:48.905678034 CEST	443	64196	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.216661930 CEST	443	64195	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.216710091 CEST	443	64193	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.216829062 CEST	443	64194	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.217300892 CEST	64195	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.217300892 CEST	64193	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.217314005 CEST	443	64195	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.217330933 CEST	443	64193	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.217866898 CEST	64193	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.217871904 CEST	443	64193	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.218005896 CEST	64195	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.218012094 CEST	443	64195	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.218189955 CEST	64194	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.218213081 CEST	443	64194	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.218544006 CEST	64194	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.218550920 CEST	443	64194	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.353270054 CEST	443	64195	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.353373051 CEST	443	64195	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.353687048 CEST	64195	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.353984118 CEST	64195	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.353984118 CEST	64195	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.354006052 CEST	443	64195	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.354016066 CEST	443	64195	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.355693102 CEST	443	64194	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.355848074 CEST	443	64194	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.356012106 CEST	64194	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.356514931 CEST	64194	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.356544018 CEST	443	64194	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.357573986 CEST	443	64193	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.357640982 CEST	443	64193	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.357786894 CEST	64193	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.358441114 CEST	64193	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.358441114 CEST	64193	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.358449936 CEST	443	64193	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.358472109 CEST	443	64193	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.363955975 CEST	64197	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.364010096 CEST	443	64197	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.364084005 CEST	64197	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.365648031 CEST	64198	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.365677118 CEST	64197	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.365689039 CEST	443	64198	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.365694046 CEST	443	64197	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.365794897 CEST	64198	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.365892887 CEST	64198	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.365921974 CEST	443	64198	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.367120028 CEST	64199	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.367146015 CEST	443	64199	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.367289066 CEST	64199	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.367513895 CEST	64199	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.367527008 CEST	443	64199	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.658266068 CEST	443	64196	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.659738064 CEST	64196	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.659776926 CEST	443	64196	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.660741091 CEST	64196	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.660748959 CEST	443	64196	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.795587063 CEST	443	64196	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.795665979 CEST	443	64196	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.795932055 CEST	64196	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.796124935 CEST	64196	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.796147108 CEST	443	64196	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.800664902 CEST	64200	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.800714970 CEST	443	64200	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:49.800805092 CEST	64200	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.801156044 CEST	64200	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:49.801177979 CEST	443	64200	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.111879110 CEST	443	64198	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.112656116 CEST	64198	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.112696886 CEST	443	64198	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.114998102 CEST	64198	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.115012884 CEST	443	64198	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.136356115 CEST	443	64197	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.137286901 CEST	64197	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.137325048 CEST	443	64197	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.137618065 CEST	443	64199	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.138035059 CEST	64197	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.138041973 CEST	443	64197	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.138413906 CEST	64199	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.138421059 CEST	443	64199	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.139275074 CEST	64199	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.139278889 CEST	443	64199	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.172302961 CEST	443	64187	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.173250914 CEST	64187	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.173274994 CEST	443	64187	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.174616098 CEST	64187	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.174626112 CEST	443	64187	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.259154081 CEST	443	64198	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.259186983 CEST	443	64198	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.259238005 CEST	443	64198	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.259253979 CEST	64198	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.259335995 CEST	64198	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.260051966 CEST	64198	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.260051966 CEST	64198	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.260077000 CEST	443	64198	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.260082960 CEST	443	64198	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.265181065 CEST	64201	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.265228033 CEST	443	64201	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.265328884 CEST	64201	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.265672922 CEST	64201	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.265686989 CEST	443	64201	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.275523901 CEST	443	64197	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.275681973 CEST	443	64197	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.275755882 CEST	64197	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.275971889 CEST	64197	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.275989056 CEST	443	64197	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.276001930 CEST	64197	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.276007891 CEST	443	64197	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.276106119 CEST	443	64199	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.276297092 CEST	443	64199	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.276391029 CEST	64199	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.276804924 CEST	64199	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.276813984 CEST	443	64199	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.276823044 CEST	64199	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.276827097 CEST	443	64199	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.282155991 CEST	64202	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.282196045 CEST	443	64202	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.282263994 CEST	64202	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.282938957 CEST	64202	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.282964945 CEST	443	64202	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.286663055 CEST	64203	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.286676884 CEST	443	64203	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.286992073 CEST	64203	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.287539959 CEST	64203	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.287550926 CEST	443	64203	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.309238911 CEST	443	64187	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.309262037 CEST	443	64187	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.309329033 CEST	443	64187	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.309389114 CEST	64187	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.309389114 CEST	64187	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.309794903 CEST	64187	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.309814930 CEST	443	64187	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.309830904 CEST	64187	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.309838057 CEST	443	64187	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.313386917 CEST	64204	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.313425064 CEST	443	64204	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.313669920 CEST	64204	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.314007998 CEST	64204	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.314018965 CEST	443	64204	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.555958986 CEST	443	64200	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.556521893 CEST	64200	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.556565046 CEST	443	64200	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.557195902 CEST	64200	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.557204962 CEST	443	64200	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.691787958 CEST	443	64200	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.691817999 CEST	443	64200	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.691879034 CEST	443	64200	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.691900969 CEST	64200	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.691955090 CEST	64200	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.692264080 CEST	64200	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.692284107 CEST	443	64200	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.692318916 CEST	64200	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.692326069 CEST	443	64200	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.695483923 CEST	64205	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.695494890 CEST	443	64205	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:50.695579052 CEST	64205	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.695713043 CEST	64205	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:50.695729017 CEST	443	64205	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.130490065 CEST	64206	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:16:51.130532980 CEST	443	64206	142.250.186.36	192.168.2.4
Oct 24, 2024 18:16:51.130609035 CEST	64206	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:16:51.130916119 CEST	64206	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:16:51.130934000 CEST	443	64206	142.250.186.36	192.168.2.4
Oct 24, 2024 18:16:51.375174046 CEST	443	64201	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.375726938 CEST	64201	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.375756025 CEST	443	64201	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.376004934 CEST	443	64204	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.376240969 CEST	64201	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.376247883 CEST	443	64201	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.376645088 CEST	64204	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.376662016 CEST	443	64204	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.377166033 CEST	64204	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.377170086 CEST	443	64204	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.377648115 CEST	443	64203	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.378022909 CEST	64203	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.378030062 CEST	443	64203	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.378393888 CEST	64203	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.378398895 CEST	443	64203	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.379563093 CEST	443	64202	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.379925966 CEST	64202	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.379959106 CEST	443	64202	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.380296946 CEST	64202	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.380302906 CEST	443	64202	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.510462999 CEST	443	64201	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.510785103 CEST	443	64201	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.510852098 CEST	64201	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.510881901 CEST	64201	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.510898113 CEST	443	64201	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.510907888 CEST	64201	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.510912895 CEST	443	64201	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.513629913 CEST	64207	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.513660908 CEST	443	64207	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.513726950 CEST	64207	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.513890982 CEST	64207	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.513905048 CEST	443	64207	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.514156103 CEST	443	64204	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.514199018 CEST	443	64204	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.514247894 CEST	443	64204	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.514281034 CEST	64204	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.514370918 CEST	64204	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.514466047 CEST	64204	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.514512062 CEST	443	64204	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.514544964 CEST	64204	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.514560938 CEST	443	64204	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.515595913 CEST	443	64203	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.515798092 CEST	443	64203	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.515860081 CEST	64203	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.515964985 CEST	64203	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.515973091 CEST	443	64203	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.516001940 CEST	64203	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.516005993 CEST	443	64203	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.516741037 CEST	64208	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.516761065 CEST	443	64208	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.516834021 CEST	64208	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.517093897 CEST	64208	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.517103910 CEST	443	64208	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.518393040 CEST	64209	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.518491983 CEST	443	64209	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.518573999 CEST	64209	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.518731117 CEST	64209	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.518769979 CEST	443	64209	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.528091908 CEST	443	64202	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.528615952 CEST	443	64202	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.528690100 CEST	64202	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.528801918 CEST	64202	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.528812885 CEST	443	64202	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.528822899 CEST	64202	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.528827906 CEST	443	64202	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.530859947 CEST	64210	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.530873060 CEST	443	64210	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:51.530972958 CEST	64210	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.531094074 CEST	64210	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:51.531100988 CEST	443	64210	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.004534960 CEST	443	64205	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.005115032 CEST	64205	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.005136967 CEST	443	64205	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.005671024 CEST	64205	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.005676031 CEST	443	64205	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.087609053 CEST	443	64206	142.250.186.36	192.168.2.4
Oct 24, 2024 18:16:52.087977886 CEST	64206	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:16:52.087994099 CEST	443	64206	142.250.186.36	192.168.2.4
Oct 24, 2024 18:16:52.088337898 CEST	443	64206	142.250.186.36	192.168.2.4
Oct 24, 2024 18:16:52.088884115 CEST	64206	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:16:52.088958979 CEST	443	64206	142.250.186.36	192.168.2.4
Oct 24, 2024 18:16:52.128765106 CEST	64206	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:16:52.145118952 CEST	443	64205	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.145190954 CEST	443	64205	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.145297050 CEST	64205	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.145601034 CEST	64205	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.145621061 CEST	443	64205	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.145632029 CEST	64205	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.145638943 CEST	443	64205	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.148797989 CEST	64211	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.148844957 CEST	443	64211	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.148914099 CEST	64211	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.149116993 CEST	64211	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.149135113 CEST	443	64211	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.275742054 CEST	443	64207	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.276329994 CEST	64207	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.276371956 CEST	443	64207	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.276904106 CEST	64207	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.276911020 CEST	443	64207	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.279860020 CEST	443	64208	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.280203104 CEST	64208	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.280224085 CEST	443	64208	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.280426025 CEST	443	64209	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.280688047 CEST	64208	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.280694008 CEST	443	64208	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.280750990 CEST	64209	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.280777931 CEST	443	64209	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.281186104 CEST	64209	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.281192064 CEST	443	64209	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.284895897 CEST	443	64210	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.285247087 CEST	64210	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.285255909 CEST	443	64210	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.285959959 CEST	64210	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.285964966 CEST	443	64210	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.412208080 CEST	443	64207	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.412403107 CEST	443	64207	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.412493944 CEST	64207	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.412662983 CEST	64207	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.412678003 CEST	443	64207	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.412708998 CEST	64207	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.412714005 CEST	443	64207	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.415939093 CEST	64212	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.415961981 CEST	443	64212	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.416026115 CEST	64212	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.416198969 CEST	64212	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.416212082 CEST	443	64212	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.418165922 CEST	443	64209	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.419644117 CEST	443	64209	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.419688940 CEST	443	64208	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.419706106 CEST	443	64209	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.419756889 CEST	443	64208	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.419760942 CEST	64209	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.419790983 CEST	64209	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.419823885 CEST	64208	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.419889927 CEST	64209	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.419909954 CEST	443	64209	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.419925928 CEST	64209	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.419931889 CEST	443	64209	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.419971943 CEST	64208	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.419987917 CEST	443	64208	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.420013905 CEST	64208	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.420020103 CEST	443	64208	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.421818972 CEST	443	64210	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.422136068 CEST	443	64210	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.422178030 CEST	64210	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.422329903 CEST	64213	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.422370911 CEST	443	64213	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.422439098 CEST	64213	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.422533035 CEST	64210	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.422539949 CEST	443	64210	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.422548056 CEST	64210	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.422550917 CEST	443	64210	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.422837019 CEST	64214	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.422848940 CEST	443	64214	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.422959089 CEST	64214	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.423156977 CEST	64214	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.423165083 CEST	443	64214	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.423525095 CEST	64213	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.423537970 CEST	443	64213	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.424653053 CEST	64215	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.424660921 CEST	443	64215	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.424722910 CEST	64215	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.424866915 CEST	64215	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.424876928 CEST	443	64215	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.906516075 CEST	443	64211	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.907152891 CEST	64211	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.907198906 CEST	443	64211	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:52.907711029 CEST	64211	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:52.907720089 CEST	443	64211	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.043517113 CEST	443	64211	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.043704033 CEST	443	64211	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.043751955 CEST	443	64211	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.043767929 CEST	64211	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.043822050 CEST	64211	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.043966055 CEST	64211	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.043993950 CEST	443	64211	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.044015884 CEST	64211	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.044023037 CEST	443	64211	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.047341108 CEST	64216	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.047384977 CEST	443	64216	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.047513008 CEST	64216	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.047635078 CEST	64216	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.047652960 CEST	443	64216	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.170296907 CEST	443	64214	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.170865059 CEST	64214	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.170898914 CEST	443	64214	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.171377897 CEST	64214	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.171385050 CEST	443	64214	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.181756973 CEST	443	64213	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.182137012 CEST	64213	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.182163000 CEST	443	64213	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.182580948 CEST	64213	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.182586908 CEST	443	64213	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.186208963 CEST	443	64212	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.186534882 CEST	64212	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.186538935 CEST	443	64215	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.186561108 CEST	443	64212	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.186920881 CEST	64212	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.186927080 CEST	443	64212	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.187035084 CEST	64215	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.187043905 CEST	443	64215	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.187382936 CEST	64215	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.187388897 CEST	443	64215	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.305903912 CEST	443	64214	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.306019068 CEST	443	64214	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.306073904 CEST	64214	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.306281090 CEST	64214	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.306298971 CEST	443	64214	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.306312084 CEST	64214	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.306318998 CEST	443	64214	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.309504986 CEST	64217	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.309539080 CEST	443	64217	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.309796095 CEST	64217	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.309930086 CEST	64217	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.309946060 CEST	443	64217	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.324152946 CEST	443	64213	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.324239969 CEST	443	64213	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.324342012 CEST	64213	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.324704885 CEST	64213	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.324722052 CEST	443	64213	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.324734926 CEST	64213	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.324740887 CEST	443	64213	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.325833082 CEST	443	64212	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.325982094 CEST	443	64212	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.326036930 CEST	64212	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.326081038 CEST	64212	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.326102972 CEST	443	64212	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.326107979 CEST	64212	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.326112986 CEST	443	64212	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.328382015 CEST	64218	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.328414917 CEST	443	64218	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.328444958 CEST	64219	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.328459978 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.328483105 CEST	64218	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.328500986 CEST	64219	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.328674078 CEST	64219	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.328687906 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.328717947 CEST	64218	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.328731060 CEST	443	64218	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.331037998 CEST	443	64215	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.331108093 CEST	443	64215	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.331212997 CEST	443	64215	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.331233025 CEST	64215	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.331300020 CEST	64215	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.331329107 CEST	64215	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.331334114 CEST	443	64215	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.331386089 CEST	64215	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.331388950 CEST	443	64215	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.333749056 CEST	64220	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.333781958 CEST	443	64220	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:53.334228039 CEST	64220	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.334228039 CEST	64220	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:53.334256887 CEST	443	64220	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.902456045 CEST	443	64217	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.903465033 CEST	64217	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:54.903465033 CEST	64217	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:54.903481960 CEST	443	64217	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.903498888 CEST	443	64217	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.906338930 CEST	443	64216	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.906342983 CEST	443	64218	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.906697989 CEST	64218	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:54.906712055 CEST	443	64218	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.906924963 CEST	64216	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:54.906932116 CEST	443	64216	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.907130003 CEST	64218	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:54.907135010 CEST	443	64218	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.907474995 CEST	64216	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:54.907479048 CEST	443	64216	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.908015966 CEST	443	64220	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.908346891 CEST	64220	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:54.908371925 CEST	443	64220	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.908699036 CEST	64220	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:54.908705950 CEST	443	64220	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.914763927 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.915117979 CEST	64219	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:54.915132999 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:54.915477991 CEST	64219	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:54.915482044 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.046509981 CEST	443	64216	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.046578884 CEST	443	64216	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.046633005 CEST	64216	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.046871901 CEST	443	64218	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.046922922 CEST	64216	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.046940088 CEST	443	64216	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.046988010 CEST	64216	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.046996117 CEST	443	64216	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.047050953 CEST	443	64218	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.047101974 CEST	64218	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.049168110 CEST	443	64220	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.049315929 CEST	443	64220	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.049372911 CEST	64220	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.049562931 CEST	64218	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.049570084 CEST	443	64218	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.049578905 CEST	64218	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.049582005 CEST	443	64218	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.052021027 CEST	64220	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.052042007 CEST	443	64220	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.052052021 CEST	64220	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.052059889 CEST	443	64220	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.054220915 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.054270029 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.054311037 CEST	64219	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.054332972 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.054352999 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.054395914 CEST	64219	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.055577993 CEST	64219	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.055593967 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.055608034 CEST	64219	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.055613041 CEST	443	64219	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.062383890 CEST	64221	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.062421083 CEST	443	64221	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.062458038 CEST	64222	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.062485933 CEST	443	64222	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.062541008 CEST	64222	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.062637091 CEST	64221	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.064130068 CEST	64223	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.064152956 CEST	443	64223	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.064178944 CEST	64224	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.064220905 CEST	443	64224	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.064248085 CEST	64223	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.064276934 CEST	64224	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.064390898 CEST	64222	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.064404011 CEST	443	64222	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.064424038 CEST	64221	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.064440966 CEST	443	64221	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.064552069 CEST	64223	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.064572096 CEST	443	64223	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.064594984 CEST	64224	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.064609051 CEST	443	64224	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.100706100 CEST	443	64217	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.100848913 CEST	443	64217	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.100899935 CEST	64217	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.101011038 CEST	64217	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.101027966 CEST	443	64217	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.101038933 CEST	64217	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.101043940 CEST	443	64217	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.103617907 CEST	64225	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.103667021 CEST	443	64225	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.103729963 CEST	64225	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.103884935 CEST	64225	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.103899002 CEST	443	64225	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.814392090 CEST	443	64224	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.818444014 CEST	64224	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.818476915 CEST	443	64224	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.819524050 CEST	64224	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.819529057 CEST	443	64224	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.823082924 CEST	443	64223	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.824295998 CEST	64223	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.824309111 CEST	443	64223	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.825537920 CEST	64223	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.825567961 CEST	443	64223	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.828510046 CEST	443	64222	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.829238892 CEST	443	64221	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.829895973 CEST	64222	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.829932928 CEST	443	64222	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.830151081 CEST	64222	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.830156088 CEST	443	64222	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.831108093 CEST	64221	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.831108093 CEST	64221	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.831118107 CEST	443	64221	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.831131935 CEST	443	64221	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.878227949 CEST	443	64225	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.879540920 CEST	64225	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.879570961 CEST	443	64225	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.882023096 CEST	64225	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.882030010 CEST	443	64225	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.951575994 CEST	443	64224	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.951704025 CEST	443	64224	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.951750994 CEST	443	64224	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.955595970 CEST	64224	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.955596924 CEST	64224	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.955795050 CEST	64224	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.955813885 CEST	443	64224	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.959705114 CEST	64226	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.959728003 CEST	443	64226	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.960592031 CEST	443	64223	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.960741043 CEST	443	64223	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.960836887 CEST	64226	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.960836887 CEST	64226	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.960859060 CEST	443	64226	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.960894108 CEST	64223	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.961194038 CEST	64223	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.961208105 CEST	443	64223	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.961272955 CEST	64223	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.961278915 CEST	443	64223	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.966614962 CEST	64227	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.966664076 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.966949940 CEST	64227	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.966950893 CEST	64227	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.966990948 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.967590094 CEST	443	64222	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.967648983 CEST	443	64222	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.969496012 CEST	443	64221	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.969757080 CEST	64222	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.969835043 CEST	443	64221	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.969963074 CEST	64221	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.969963074 CEST	64221	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.970078945 CEST	64221	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.970084906 CEST	443	64221	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.971316099 CEST	64222	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.971330881 CEST	443	64222	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.971470118 CEST	64222	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.971477032 CEST	443	64222	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.974064112 CEST	64228	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.974091053 CEST	443	64228	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.974517107 CEST	64228	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.975636005 CEST	64228	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.975639105 CEST	64229	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.975642920 CEST	443	64228	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.975681067 CEST	443	64229	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:55.975794077 CEST	64229	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.975922108 CEST	64229	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:55.975934982 CEST	443	64229	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.021127939 CEST	443	64225	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.021202087 CEST	443	64225	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.021433115 CEST	64225	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.021433115 CEST	64225	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.021472931 CEST	64225	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.021490097 CEST	443	64225	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.025648117 CEST	64230	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.025667906 CEST	443	64230	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.031718016 CEST	64230	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.031790972 CEST	64230	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.031801939 CEST	443	64230	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.708930969 CEST	443	64226	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.709523916 CEST	64226	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.709549904 CEST	443	64226	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.710197926 CEST	64226	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.710202932 CEST	443	64226	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.727054119 CEST	443	64229	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.727442026 CEST	64229	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.727507114 CEST	443	64229	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.727900028 CEST	64229	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.727915049 CEST	443	64229	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.736252069 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.736603975 CEST	64227	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.736629963 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.737078905 CEST	64227	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.737083912 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.848289967 CEST	443	64226	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.848534107 CEST	443	64226	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.848596096 CEST	64226	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.848849058 CEST	64226	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.848897934 CEST	443	64226	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.848942041 CEST	64226	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.848959923 CEST	443	64226	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.858546972 CEST	64231	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.858637094 CEST	443	64231	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.858720064 CEST	64231	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.860727072 CEST	64231	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.860759974 CEST	443	64231	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.864083052 CEST	443	64229	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.864109993 CEST	443	64229	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.864157915 CEST	443	64229	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.864162922 CEST	64229	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.864208937 CEST	64229	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.865092039 CEST	64229	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.865120888 CEST	443	64229	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.865149021 CEST	64229	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.865161896 CEST	443	64229	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.872522116 CEST	64232	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.872539043 CEST	443	64232	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.872610092 CEST	64232	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.873137951 CEST	64232	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.873150110 CEST	443	64232	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.877788067 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.877866030 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.877924919 CEST	64227	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.877954006 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.877979994 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.878026962 CEST	64227	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.878403902 CEST	64227	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.878417969 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.878452063 CEST	64227	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.878457069 CEST	443	64227	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.885359049 CEST	64233	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.885390997 CEST	443	64233	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.885461092 CEST	64233	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.885729074 CEST	64233	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.885746002 CEST	443	64233	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.890712976 CEST	443	64228	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.908622026 CEST	64228	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.908632994 CEST	443	64228	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:56.917048931 CEST	64228	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:56.917053938 CEST	443	64228	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.050529003 CEST	443	64228	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.050621986 CEST	443	64228	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.050693035 CEST	64228	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.051549911 CEST	64228	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.051568031 CEST	443	64228	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.060425043 CEST	64234	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.060460091 CEST	443	64234	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.060532093 CEST	64234	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.060952902 CEST	64234	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.060961962 CEST	443	64234	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.526307106 CEST	443	64230	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.527535915 CEST	64230	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.527554989 CEST	443	64230	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.528728962 CEST	64230	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.528737068 CEST	443	64230	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.611237049 CEST	443	64231	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.612756014 CEST	64231	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.612790108 CEST	443	64231	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.615520954 CEST	64231	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.615529060 CEST	443	64231	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.654572964 CEST	443	64232	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.654901981 CEST	443	64233	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.655270100 CEST	64232	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.655284882 CEST	443	64232	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.656099081 CEST	64232	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.656111956 CEST	443	64232	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.657092094 CEST	64233	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.657092094 CEST	64233	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.657104969 CEST	443	64233	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.657119989 CEST	443	64233	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.665735006 CEST	443	64230	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.665812016 CEST	443	64230	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.666191101 CEST	64230	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.666191101 CEST	64230	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.666344881 CEST	64230	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.666363001 CEST	443	64230	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.671533108 CEST	64235	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.671571970 CEST	443	64235	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.675782919 CEST	64235	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.675782919 CEST	64235	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.675816059 CEST	443	64235	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.747917891 CEST	443	64231	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.747953892 CEST	443	64231	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.747998953 CEST	443	64231	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.748047113 CEST	64231	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.748342991 CEST	64231	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.748629093 CEST	64231	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.748646975 CEST	443	64231	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.748681068 CEST	64231	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.748687029 CEST	443	64231	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.752340078 CEST	64236	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.752379894 CEST	443	64236	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.752458096 CEST	64236	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.752746105 CEST	64236	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.752759933 CEST	443	64236	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.795356035 CEST	443	64233	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.795380116 CEST	443	64233	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.795439005 CEST	443	64233	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.795485973 CEST	64233	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.795542955 CEST	64233	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.796402931 CEST	443	64232	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.796483994 CEST	443	64232	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.796613932 CEST	64233	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.796653986 CEST	443	64233	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.796654940 CEST	64232	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.796694040 CEST	64233	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.796705008 CEST	443	64233	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.797703981 CEST	64232	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.797703981 CEST	64232	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.797729015 CEST	443	64232	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.797739983 CEST	443	64232	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.803709984 CEST	64237	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.803755999 CEST	443	64237	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.804982901 CEST	64238	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.805018902 CEST	443	64238	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.805078983 CEST	64237	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.805237055 CEST	64238	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.805377960 CEST	64238	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.805392027 CEST	443	64238	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.805411100 CEST	64237	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.805427074 CEST	443	64237	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.825951099 CEST	443	64234	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.827007055 CEST	64234	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.827030897 CEST	443	64234	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.827931881 CEST	64234	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.827945948 CEST	443	64234	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.965693951 CEST	443	64234	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.965862036 CEST	443	64234	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.966240883 CEST	64234	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.966686964 CEST	64234	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.966711998 CEST	443	64234	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.967331886 CEST	64234	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.967339993 CEST	443	64234	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.973669052 CEST	64239	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.973711967 CEST	443	64239	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:57.977829933 CEST	64239	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.978662968 CEST	64239	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:57.978681087 CEST	443	64239	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.437603951 CEST	443	64235	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.438133001 CEST	64235	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.438152075 CEST	443	64235	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.439513922 CEST	64235	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.439521074 CEST	443	64235	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.548315048 CEST	443	64236	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.548863888 CEST	64236	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.548891068 CEST	443	64236	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.549391985 CEST	64236	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.549396992 CEST	443	64236	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.577130079 CEST	443	64237	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.577687979 CEST	64237	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.577702045 CEST	443	64237	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.577990055 CEST	64237	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.577996016 CEST	443	64237	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.582922935 CEST	443	64238	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.583451033 CEST	64238	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.583470106 CEST	443	64238	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.583777905 CEST	64238	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.583782911 CEST	443	64238	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.585454941 CEST	443	64235	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.585484982 CEST	443	64235	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.585525036 CEST	443	64235	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.585558891 CEST	64235	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.585776091 CEST	64235	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.585829020 CEST	64235	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.585829020 CEST	64235	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.585849047 CEST	443	64235	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.585860014 CEST	443	64235	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.588632107 CEST	64240	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.588661909 CEST	443	64240	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.588916063 CEST	64240	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.588916063 CEST	64240	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.588942051 CEST	443	64240	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.698537111 CEST	443	64236	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.698615074 CEST	443	64236	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.698674917 CEST	64236	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.698822975 CEST	64236	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.698848009 CEST	64236	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.698848009 CEST	443	64236	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.698858023 CEST	443	64236	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.701682091 CEST	64241	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.701720953 CEST	443	64241	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.701832056 CEST	64241	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.701991081 CEST	64241	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.702013016 CEST	443	64241	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.726361990 CEST	443	64238	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.726432085 CEST	443	64238	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.726504087 CEST	64238	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.726564884 CEST	64238	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.726572990 CEST	443	64238	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.726583004 CEST	64238	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.726587057 CEST	443	64238	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.728916883 CEST	64242	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.728951931 CEST	443	64242	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.729120016 CEST	64242	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.729159117 CEST	64242	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.729175091 CEST	443	64242	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.735964060 CEST	443	64237	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.736027002 CEST	443	64237	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.736071110 CEST	64237	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.736171007 CEST	64237	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.736171007 CEST	64237	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.736191034 CEST	443	64237	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.736210108 CEST	443	64237	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.738277912 CEST	64243	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.738302946 CEST	443	64243	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.738365889 CEST	64243	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.738543034 CEST	64243	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.738554955 CEST	443	64243	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.747900009 CEST	443	64239	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.748253107 CEST	64239	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.748265982 CEST	443	64239	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.748770952 CEST	64239	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.748785019 CEST	443	64239	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.896074057 CEST	443	64239	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.896111965 CEST	443	64239	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.896155119 CEST	443	64239	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.896197081 CEST	64239	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.896241903 CEST	64239	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.896565914 CEST	64239	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.896565914 CEST	64239	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.896596909 CEST	443	64239	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.896616936 CEST	443	64239	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.900069952 CEST	64244	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.900105953 CEST	443	64244	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:58.900238991 CEST	64244	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.900351048 CEST	64244	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:58.900365114 CEST	443	64244	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.351042986 CEST	443	64240	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.351658106 CEST	64240	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.351675987 CEST	443	64240	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.352245092 CEST	64240	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.352255106 CEST	443	64240	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.487518072 CEST	443	64240	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.487601042 CEST	443	64240	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.487658978 CEST	64240	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.487921953 CEST	64240	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.487921953 CEST	64240	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.487947941 CEST	443	64240	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.487962961 CEST	443	64240	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.491959095 CEST	64245	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.492006063 CEST	443	64245	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.492095947 CEST	64245	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.492300987 CEST	64245	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.492315054 CEST	443	64245	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.504580021 CEST	443	64242	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.505388021 CEST	64242	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.505417109 CEST	443	64242	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.506202936 CEST	64242	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.506211042 CEST	443	64242	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.506602049 CEST	443	64243	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.507180929 CEST	64243	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.507193089 CEST	443	64243	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.507744074 CEST	64243	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.507764101 CEST	443	64243	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.651429892 CEST	443	64242	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.651532888 CEST	443	64242	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.651582003 CEST	443	64243	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.651660919 CEST	443	64243	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.651808023 CEST	64243	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.651825905 CEST	64242	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.651825905 CEST	64242	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.651825905 CEST	64242	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.651892900 CEST	64243	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.651911020 CEST	443	64243	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.651946068 CEST	64243	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.651952028 CEST	443	64243	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.655143976 CEST	64246	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.655185938 CEST	443	64246	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.655191898 CEST	64247	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.655230045 CEST	443	64247	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.655301094 CEST	64247	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.655302048 CEST	64246	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.655492067 CEST	64247	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.655502081 CEST	64246	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.655505896 CEST	443	64247	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.655510902 CEST	443	64246	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.656091928 CEST	443	64244	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.656512022 CEST	64244	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.656528950 CEST	443	64244	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.656985998 CEST	64244	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.656991959 CEST	443	64244	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.796597958 CEST	443	64244	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.796783924 CEST	443	64244	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.797095060 CEST	64244	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.797095060 CEST	64244	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.797240973 CEST	64244	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.797257900 CEST	443	64244	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.800133944 CEST	64248	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.800179005 CEST	443	64248	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.800353050 CEST	64248	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.800438881 CEST	64248	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.800450087 CEST	443	64248	13.107.253.45	192.168.2.4
Oct 24, 2024 18:16:59.957120895 CEST	64242	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:16:59.957144976 CEST	443	64242	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.436702013 CEST	443	64247	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.436856985 CEST	443	64246	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.437361956 CEST	64247	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.437366962 CEST	64246	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.437381029 CEST	443	64246	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.437382936 CEST	443	64247	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.437920094 CEST	64246	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.437927961 CEST	443	64246	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.437977076 CEST	64247	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.437982082 CEST	443	64247	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.466612101 CEST	443	64241	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.467498064 CEST	64241	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.467498064 CEST	64241	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.467513084 CEST	443	64241	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.467525959 CEST	443	64241	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.583401918 CEST	443	64246	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.583442926 CEST	443	64247	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.583446980 CEST	443	64246	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.583504915 CEST	443	64246	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.583518028 CEST	443	64247	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.583553076 CEST	64246	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.583646059 CEST	64247	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.583647966 CEST	64246	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.583857059 CEST	64247	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.583857059 CEST	64246	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.583872080 CEST	443	64247	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.583874941 CEST	443	64246	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.583894014 CEST	64247	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.583899975 CEST	443	64247	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.583975077 CEST	64246	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.583983898 CEST	443	64246	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.587049007 CEST	64249	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.587074041 CEST	64250	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.587093115 CEST	443	64249	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.587142944 CEST	443	64250	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.587171078 CEST	64249	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.587322950 CEST	64249	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.587333918 CEST	443	64249	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.587363958 CEST	64250	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.587476969 CEST	64250	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.587511063 CEST	443	64250	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.599761963 CEST	443	64248	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.600176096 CEST	64248	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.600214005 CEST	443	64248	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.600649118 CEST	64248	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.600660086 CEST	443	64248	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.605487108 CEST	443	64241	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.605515003 CEST	443	64241	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.605561018 CEST	443	64241	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.605585098 CEST	64241	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.605623007 CEST	64241	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.605891943 CEST	64241	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.605891943 CEST	64241	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.605911016 CEST	443	64241	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.605921984 CEST	443	64241	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.608175039 CEST	64251	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.608231068 CEST	443	64251	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.608450890 CEST	64251	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.608582973 CEST	64251	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.608612061 CEST	443	64251	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.738430023 CEST	443	64248	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.738588095 CEST	443	64248	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.738662004 CEST	64248	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.738697052 CEST	64248	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.738713980 CEST	443	64248	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.738742113 CEST	64248	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.738748074 CEST	443	64248	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.741126060 CEST	64252	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.741214991 CEST	443	64252	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:00.741298914 CEST	64252	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.741447926 CEST	64252	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:00.741482973 CEST	443	64252	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.317836046 CEST	443	64245	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.318535089 CEST	64245	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.318552971 CEST	443	64245	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.319031000 CEST	64245	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.319036007 CEST	443	64245	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.357279062 CEST	443	64249	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.357395887 CEST	443	64250	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.357861042 CEST	64249	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.357897043 CEST	64250	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.357919931 CEST	443	64250	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.357923985 CEST	443	64249	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.358361959 CEST	64249	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.358376980 CEST	443	64249	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.358715057 CEST	64250	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.358721018 CEST	443	64250	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.416019917 CEST	443	64251	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.416553974 CEST	64251	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.416580915 CEST	443	64251	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.416990042 CEST	64251	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.416995049 CEST	443	64251	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.454864979 CEST	443	64245	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.454987049 CEST	443	64245	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.455034971 CEST	443	64245	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.455122948 CEST	64245	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.455327034 CEST	64245	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.455327034 CEST	64245	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.455346107 CEST	443	64245	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.455354929 CEST	443	64245	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.458537102 CEST	64253	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.458580017 CEST	443	64253	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.458655119 CEST	64253	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.458801031 CEST	64253	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.458816051 CEST	443	64253	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.506084919 CEST	443	64249	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.506123066 CEST	443	64250	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.506170988 CEST	443	64249	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.506184101 CEST	443	64250	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.506289005 CEST	64250	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.506311893 CEST	64249	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.506398916 CEST	64250	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.506423950 CEST	443	64250	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.506436110 CEST	64249	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.506436110 CEST	64249	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.506438971 CEST	64250	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.506448030 CEST	443	64250	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.506481886 CEST	443	64249	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.506515980 CEST	443	64249	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.509032965 CEST	64254	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.509074926 CEST	443	64254	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.509094954 CEST	64255	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.509119987 CEST	443	64255	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.509145975 CEST	64254	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.509172916 CEST	64255	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.509270906 CEST	64254	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.509284973 CEST	443	64254	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.509325981 CEST	64255	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.509340048 CEST	443	64255	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.561964035 CEST	443	64252	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.563211918 CEST	443	64251	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.563271999 CEST	443	64251	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.563399076 CEST	64251	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.578408957 CEST	64252	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.578439951 CEST	443	64252	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.578758001 CEST	64251	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.578758001 CEST	64251	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.578807116 CEST	443	64251	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.578835011 CEST	443	64251	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.579468012 CEST	64252	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.579473972 CEST	443	64252	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.593187094 CEST	64256	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.593226910 CEST	443	64256	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.593450069 CEST	64256	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.593548059 CEST	64256	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.593558073 CEST	443	64256	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.718905926 CEST	443	64252	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.718990088 CEST	443	64252	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.719225883 CEST	64252	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.719299078 CEST	64252	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.719325066 CEST	443	64252	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.719338894 CEST	64252	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.719343901 CEST	443	64252	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.722317934 CEST	64257	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.722351074 CEST	443	64257	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:01.722420931 CEST	64257	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.722610950 CEST	64257	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:01.722623110 CEST	443	64257	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.088524103 CEST	443	64206	142.250.186.36	192.168.2.4
Oct 24, 2024 18:17:02.088593960 CEST	443	64206	142.250.186.36	192.168.2.4
Oct 24, 2024 18:17:02.088870049 CEST	64206	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:17:02.223349094 CEST	443	64253	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.224055052 CEST	64253	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.224072933 CEST	443	64253	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.224618912 CEST	64253	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.224625111 CEST	443	64253	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.285187006 CEST	443	64255	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.285713911 CEST	64255	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.285732031 CEST	443	64255	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.286189079 CEST	64255	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.286194086 CEST	443	64255	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.313390017 CEST	443	64254	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.313810110 CEST	64254	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.313824892 CEST	443	64254	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.314261913 CEST	64254	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.314268112 CEST	443	64254	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.360205889 CEST	443	64253	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.360366106 CEST	443	64253	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.360435963 CEST	64253	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.360558987 CEST	64253	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.360574961 CEST	443	64253	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.360585928 CEST	64253	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.360590935 CEST	443	64253	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.363769054 CEST	64258	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.363814116 CEST	443	64258	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.363923073 CEST	64258	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.364140987 CEST	64258	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.364159107 CEST	443	64258	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.368287086 CEST	443	64256	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.368850946 CEST	64256	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.368860960 CEST	443	64256	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.369149923 CEST	64256	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.369155884 CEST	443	64256	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.429874897 CEST	443	64255	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.429934025 CEST	443	64255	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.430015087 CEST	443	64255	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.430030107 CEST	64255	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.430071115 CEST	64255	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.430197001 CEST	64255	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.430206060 CEST	443	64255	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.430217028 CEST	64255	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.430221081 CEST	443	64255	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.433427095 CEST	64259	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.433461905 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.433598995 CEST	64259	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.433777094 CEST	64259	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.433789968 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.453788042 CEST	443	64254	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.453948975 CEST	443	64254	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.454018116 CEST	64254	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.454051971 CEST	64254	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.454068899 CEST	443	64254	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.454081059 CEST	64254	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.454085112 CEST	443	64254	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.456665039 CEST	64260	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.456710100 CEST	443	64260	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.456909895 CEST	64260	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.457130909 CEST	64260	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.457156897 CEST	443	64260	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.500950098 CEST	443	64257	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.501374006 CEST	64257	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.501380920 CEST	443	64257	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.501904964 CEST	64257	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.501909018 CEST	443	64257	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.509221077 CEST	443	64256	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.509288073 CEST	443	64256	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.509363890 CEST	64256	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.509388924 CEST	64256	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.509474039 CEST	64256	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.509474039 CEST	64256	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.509490967 CEST	443	64256	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.509501934 CEST	443	64256	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.511919975 CEST	64261	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.511953115 CEST	443	64261	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.512022018 CEST	64261	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.512186050 CEST	64261	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.512198925 CEST	443	64261	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.647492886 CEST	443	64257	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.647656918 CEST	443	64257	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.647775888 CEST	64257	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.647830963 CEST	64257	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.647830963 CEST	64257	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.647845030 CEST	443	64257	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.647854090 CEST	443	64257	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.650652885 CEST	64262	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.650696039 CEST	443	64262	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:02.650878906 CEST	64262	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.650990009 CEST	64262	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:02.651002884 CEST	443	64262	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.141156912 CEST	443	64258	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.141796112 CEST	64258	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.141827106 CEST	443	64258	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.142304897 CEST	64258	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.142317057 CEST	443	64258	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.213665962 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.214241982 CEST	64259	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.214261055 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.214698076 CEST	64259	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.214709997 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.247590065 CEST	443	64260	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.248173952 CEST	64260	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.248188019 CEST	443	64260	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.248523951 CEST	64260	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.248531103 CEST	443	64260	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.255800962 CEST	64206	443	192.168.2.4	142.250.186.36
Oct 24, 2024 18:17:03.255820990 CEST	443	64206	142.250.186.36	192.168.2.4
Oct 24, 2024 18:17:03.282598019 CEST	443	64258	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.282772064 CEST	443	64258	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.282897949 CEST	64258	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.282969952 CEST	64258	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.282988071 CEST	443	64258	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.283046961 CEST	64258	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.283052921 CEST	443	64258	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.286210060 CEST	64263	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.286257982 CEST	443	64263	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.286339998 CEST	64263	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.286489964 CEST	64263	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.286503077 CEST	443	64263	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.288800001 CEST	443	64261	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.289208889 CEST	64261	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.289218903 CEST	443	64261	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.289652109 CEST	64261	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.289655924 CEST	443	64261	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.360486031 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.360543013 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.360636950 CEST	64259	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.360650063 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.360681057 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.360765934 CEST	64259	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.360891104 CEST	64259	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.360891104 CEST	64259	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.360912085 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.360919952 CEST	443	64259	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.363554001 CEST	64264	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.363610029 CEST	443	64264	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.363702059 CEST	64264	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.363841057 CEST	64264	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.363878012 CEST	443	64264	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.390302896 CEST	443	64260	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.390333891 CEST	443	64260	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.390383005 CEST	443	64260	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.390400887 CEST	64260	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.390429974 CEST	64260	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.390568018 CEST	64260	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.390568018 CEST	64260	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.390584946 CEST	443	64260	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.390602112 CEST	443	64260	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.393050909 CEST	64265	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.393094063 CEST	443	64265	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.393167973 CEST	64265	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.393291950 CEST	64265	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.393305063 CEST	443	64265	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.424926043 CEST	443	64262	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.425338030 CEST	64262	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.425357103 CEST	443	64262	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.425791025 CEST	64262	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.425796986 CEST	443	64262	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.434607983 CEST	443	64261	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.434633017 CEST	443	64261	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.434679031 CEST	443	64261	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.434695959 CEST	64261	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.434782982 CEST	64261	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.434963942 CEST	64261	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.434963942 CEST	64261	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.434983015 CEST	443	64261	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.434993029 CEST	443	64261	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.437388897 CEST	64266	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.437427998 CEST	443	64266	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.437681913 CEST	64266	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.437827110 CEST	64266	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.437845945 CEST	443	64266	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.564095020 CEST	443	64262	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.564166069 CEST	443	64262	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.564347982 CEST	64262	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.564553022 CEST	64262	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.564553022 CEST	64262	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.564572096 CEST	443	64262	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.564579964 CEST	443	64262	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.567836046 CEST	64267	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.567882061 CEST	443	64267	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:03.567965984 CEST	64267	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.568176985 CEST	64267	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:03.568186998 CEST	443	64267	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.140115976 CEST	443	64264	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.140134096 CEST	443	64263	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.140630007 CEST	64263	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.140666008 CEST	443	64263	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.140701056 CEST	64264	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.140736103 CEST	443	64264	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.141166925 CEST	64263	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.141175032 CEST	443	64263	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.141767025 CEST	64264	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.141776085 CEST	443	64264	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.144731998 CEST	443	64265	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.145210028 CEST	64265	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.145239115 CEST	443	64265	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.145626068 CEST	64265	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.145634890 CEST	443	64265	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.209142923 CEST	443	64266	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.209728956 CEST	64266	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.209757090 CEST	443	64266	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.210345030 CEST	64266	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.210354090 CEST	443	64266	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.276458979 CEST	443	64263	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.276695013 CEST	443	64263	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.276745081 CEST	443	64263	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.276803017 CEST	64263	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.276894093 CEST	64263	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.276921988 CEST	443	64263	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.276938915 CEST	64263	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.276945114 CEST	443	64263	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.277213097 CEST	443	64264	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.277287006 CEST	443	64264	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.277379036 CEST	64264	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.277539968 CEST	64264	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.277559996 CEST	443	64264	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.277570963 CEST	64264	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.277576923 CEST	443	64264	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.280076981 CEST	64268	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.280116081 CEST	443	64268	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.280236006 CEST	64269	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.280272007 CEST	443	64269	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.280297995 CEST	64268	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.280327082 CEST	64269	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.280463934 CEST	64268	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.280476093 CEST	443	64268	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.280483007 CEST	64269	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.280494928 CEST	443	64269	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.281543016 CEST	443	64265	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.281568050 CEST	443	64265	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.281614065 CEST	443	64265	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.281685114 CEST	64265	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.281790018 CEST	64265	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.281807899 CEST	443	64265	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.281821012 CEST	64265	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.281826019 CEST	443	64265	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.284365892 CEST	64270	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.284387112 CEST	443	64270	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.284459114 CEST	64270	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.284910917 CEST	64270	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.284920931 CEST	443	64270	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.315284014 CEST	443	64267	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.315788031 CEST	64267	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.315804005 CEST	443	64267	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.316612005 CEST	64267	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.316617966 CEST	443	64267	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.350507975 CEST	443	64266	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.350558996 CEST	443	64266	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.350609064 CEST	443	64266	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.350641966 CEST	64266	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.350686073 CEST	64266	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.350927114 CEST	64266	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.350945950 CEST	443	64266	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.350958109 CEST	64266	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.350964069 CEST	443	64266	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.354070902 CEST	64271	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.354119062 CEST	443	64271	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.354186058 CEST	64271	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.354351044 CEST	64271	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.354362965 CEST	443	64271	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.450071096 CEST	443	64267	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.450197935 CEST	443	64267	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.450247049 CEST	443	64267	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.450304985 CEST	64267	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.450440884 CEST	64267	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.450453997 CEST	443	64267	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.450465918 CEST	64267	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.450469971 CEST	443	64267	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.453459024 CEST	64272	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.453484058 CEST	443	64272	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:04.453571081 CEST	64272	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.453772068 CEST	64272	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:04.453780890 CEST	443	64272	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.028661013 CEST	443	64269	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.029223919 CEST	64269	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.029246092 CEST	443	64269	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.029717922 CEST	64269	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.029723883 CEST	443	64269	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.038286924 CEST	443	64268	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.038881063 CEST	64268	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.038922071 CEST	443	64268	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.039228916 CEST	64268	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.039235115 CEST	443	64268	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.042978048 CEST	443	64270	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.043389082 CEST	64270	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.043395042 CEST	443	64270	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.043817997 CEST	64270	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.043822050 CEST	443	64270	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.146696091 CEST	443	64271	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.147241116 CEST	64271	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.147262096 CEST	443	64271	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.147712946 CEST	64271	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.147720098 CEST	443	64271	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.165333033 CEST	443	64269	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.165396929 CEST	443	64269	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.165601969 CEST	64269	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.165630102 CEST	64269	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.165648937 CEST	443	64269	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.165657997 CEST	64269	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.165663958 CEST	443	64269	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.168673038 CEST	64273	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.168725967 CEST	443	64273	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.168883085 CEST	64273	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.169023991 CEST	64273	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.169035912 CEST	443	64273	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.177279949 CEST	443	64268	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.177352905 CEST	443	64268	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.177597046 CEST	64268	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.177598000 CEST	64268	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.177637100 CEST	64268	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.177654028 CEST	443	64268	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.179877996 CEST	64274	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.179912090 CEST	443	64274	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.180073977 CEST	64274	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.180238962 CEST	64274	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.180250883 CEST	443	64274	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.182444096 CEST	443	64270	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.182507038 CEST	443	64270	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.182630062 CEST	64270	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.182670116 CEST	64270	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.182676077 CEST	443	64270	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.182687044 CEST	64270	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.182693005 CEST	443	64270	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.185056925 CEST	64275	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.185080051 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.185141087 CEST	64275	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.185245037 CEST	64275	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.185256958 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.224097967 CEST	443	64272	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.224518061 CEST	64272	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.224545002 CEST	443	64272	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.224965096 CEST	64272	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.224968910 CEST	443	64272	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.288938999 CEST	443	64271	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.289011955 CEST	443	64271	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.289112091 CEST	64271	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.289134979 CEST	443	64271	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.289189100 CEST	64271	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.289446115 CEST	64271	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.289469004 CEST	443	64271	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.289479017 CEST	64271	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.289484978 CEST	443	64271	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.293024063 CEST	64276	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.293045998 CEST	443	64276	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.293131113 CEST	64276	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.293553114 CEST	64276	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.293566942 CEST	443	64276	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.365228891 CEST	443	64272	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.365763903 CEST	443	64272	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.365852118 CEST	64272	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.365905046 CEST	64272	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.365905046 CEST	64272	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.365943909 CEST	443	64272	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.365967989 CEST	443	64272	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.368568897 CEST	64277	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.368606091 CEST	443	64277	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.368684053 CEST	64277	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.368839025 CEST	64277	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.368850946 CEST	443	64277	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.932147026 CEST	443	64274	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.932645082 CEST	64274	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.932672977 CEST	443	64274	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.933125019 CEST	64274	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.933131933 CEST	443	64274	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.951611042 CEST	443	64273	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.952006102 CEST	64273	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.952035904 CEST	443	64273	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.952439070 CEST	64273	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.952446938 CEST	443	64273	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.954718113 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.955029964 CEST	64275	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.955046892 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:05.955420017 CEST	64275	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:05.955425978 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.063762903 CEST	443	64276	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.064126015 CEST	64276	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.064152956 CEST	443	64276	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.064542055 CEST	64276	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.064548016 CEST	443	64276	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.068824053 CEST	443	64274	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.068892956 CEST	443	64274	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.068943024 CEST	64274	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.069077969 CEST	64274	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.069097996 CEST	443	64274	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.069108963 CEST	64274	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.069113970 CEST	443	64274	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.071743965 CEST	64278	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.071778059 CEST	443	64278	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.071847916 CEST	64278	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.072011948 CEST	64278	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.072017908 CEST	443	64278	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.091224909 CEST	443	64273	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.091432095 CEST	443	64273	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.091476917 CEST	443	64273	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.091509104 CEST	64273	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.091527939 CEST	64273	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.091592073 CEST	64273	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.091608047 CEST	443	64273	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.091618061 CEST	64273	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.091624022 CEST	443	64273	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.093874931 CEST	64279	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.093914032 CEST	443	64279	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.093981981 CEST	64279	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.094132900 CEST	64279	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.094146967 CEST	443	64279	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.094511986 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.094599009 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.094666958 CEST	64275	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.094676018 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.094702005 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.094754934 CEST	64275	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.094808102 CEST	64275	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.094814062 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.094821930 CEST	64275	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.094836950 CEST	443	64275	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.096848011 CEST	64280	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.096879005 CEST	443	64280	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.097011089 CEST	64280	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.097107887 CEST	64280	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.097119093 CEST	443	64280	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.136786938 CEST	443	64277	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.137128115 CEST	64277	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.137150049 CEST	443	64277	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.137532949 CEST	64277	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.137537956 CEST	443	64277	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.204329967 CEST	443	64276	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.204495907 CEST	443	64276	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.204698086 CEST	64276	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.204730988 CEST	64276	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.204746962 CEST	443	64276	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.204777002 CEST	64276	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.204782963 CEST	443	64276	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.207894087 CEST	64281	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.207995892 CEST	443	64281	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.208106995 CEST	64281	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.208233118 CEST	64281	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.208250999 CEST	443	64281	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.274091005 CEST	443	64277	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.274163008 CEST	443	64277	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.274247885 CEST	64277	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.274362087 CEST	64277	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.274383068 CEST	443	64277	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.274394035 CEST	64277	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.274399996 CEST	443	64277	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.276858091 CEST	64282	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.276899099 CEST	443	64282	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.277023077 CEST	64282	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.277168989 CEST	64282	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.277179956 CEST	443	64282	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.834527016 CEST	443	64278	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.835005999 CEST	64278	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.835030079 CEST	443	64278	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.835417986 CEST	64278	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.835427046 CEST	443	64278	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.865750074 CEST	443	64279	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.866214991 CEST	64279	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.866245985 CEST	443	64279	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.866676092 CEST	64279	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.866681099 CEST	443	64279	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.871512890 CEST	443	64280	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.871889114 CEST	64280	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.871901989 CEST	443	64280	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.872376919 CEST	64280	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.872381926 CEST	443	64280	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.964380980 CEST	443	64281	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.964915991 CEST	64281	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.964951038 CEST	443	64281	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.965616941 CEST	64281	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.965625048 CEST	443	64281	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.973548889 CEST	443	64278	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.973628044 CEST	443	64278	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.973687887 CEST	64278	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.973844051 CEST	64278	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.973860979 CEST	443	64278	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.973901033 CEST	64278	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.973907948 CEST	443	64278	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.976826906 CEST	64283	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.976860046 CEST	443	64283	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:06.976984024 CEST	64283	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.977133036 CEST	64283	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:06.977150917 CEST	443	64283	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.010426044 CEST	443	64279	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.010581970 CEST	443	64279	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.010699034 CEST	64279	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.010857105 CEST	64279	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.010879040 CEST	443	64279	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.010890007 CEST	64279	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.010895967 CEST	443	64279	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.013026953 CEST	443	64280	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.013194084 CEST	443	64280	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.013300896 CEST	64280	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.013417006 CEST	64280	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.013437986 CEST	443	64280	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.013497114 CEST	64280	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.013504028 CEST	443	64280	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.014637947 CEST	64284	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.014672995 CEST	443	64284	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.014734983 CEST	64284	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.014978886 CEST	64284	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.014993906 CEST	443	64284	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.016145945 CEST	64285	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.016184092 CEST	443	64285	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.016311884 CEST	64285	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.016411066 CEST	64285	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.016426086 CEST	443	64285	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.031590939 CEST	443	64282	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.031961918 CEST	64282	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.031975031 CEST	443	64282	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.032329082 CEST	64282	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.032335043 CEST	443	64282	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.099261045 CEST	443	64281	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.099889994 CEST	443	64281	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.100006104 CEST	443	64281	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.100044012 CEST	64281	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.100085020 CEST	64281	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.100128889 CEST	64281	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.100147963 CEST	443	64281	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.100157976 CEST	64281	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.100163937 CEST	443	64281	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.102679014 CEST	64286	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.102715015 CEST	443	64286	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.102791071 CEST	64286	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.102926970 CEST	64286	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.102932930 CEST	443	64286	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.169769049 CEST	443	64282	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.169835091 CEST	443	64282	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.169975996 CEST	64282	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.170001030 CEST	64282	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.170001030 CEST	64282	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.170022964 CEST	443	64282	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.170037985 CEST	443	64282	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.172527075 CEST	64287	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.172564983 CEST	443	64287	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.172665119 CEST	64287	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.172857046 CEST	64287	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.172868967 CEST	443	64287	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.734366894 CEST	443	64283	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.748796940 CEST	64283	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.748796940 CEST	64283	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.748833895 CEST	443	64283	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.748857975 CEST	443	64283	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.782247066 CEST	443	64285	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.783509970 CEST	443	64284	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.791810036 CEST	64285	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.791810036 CEST	64285	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.791824102 CEST	443	64285	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.791841030 CEST	443	64285	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.794552088 CEST	64284	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.794552088 CEST	64284	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.794584036 CEST	443	64284	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.794604063 CEST	443	64284	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.880378008 CEST	443	64286	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.881711006 CEST	443	64283	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.881748915 CEST	443	64283	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.881807089 CEST	443	64283	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.881874084 CEST	64283	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.881875038 CEST	64283	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.887351990 CEST	64286	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.887351990 CEST	64286	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.887382984 CEST	443	64286	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.887406111 CEST	443	64286	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.887609959 CEST	64283	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.887654066 CEST	443	64283	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.887691975 CEST	64283	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.887710094 CEST	443	64283	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.897428989 CEST	64288	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.897475958 CEST	443	64288	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.897675037 CEST	64288	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.905900955 CEST	64288	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.905916929 CEST	443	64288	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.926914930 CEST	443	64287	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.928096056 CEST	443	64285	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.928145885 CEST	443	64285	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.928261995 CEST	443	64285	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.928270102 CEST	64285	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.928442001 CEST	64285	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.929725885 CEST	443	64284	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.929884911 CEST	443	64284	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.931723118 CEST	64284	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.947355032 CEST	64287	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.947355032 CEST	64287	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.947371960 CEST	443	64287	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.947391033 CEST	443	64287	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.947680950 CEST	64285	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.947680950 CEST	64285	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.947700977 CEST	443	64285	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.947711945 CEST	443	64285	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.957341909 CEST	64284	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.957341909 CEST	64284	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:07.957374096 CEST	443	64284	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:07.957396030 CEST	443	64284	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.018356085 CEST	443	64286	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.018430948 CEST	443	64286	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.018599033 CEST	64286	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.031073093 CEST	64289	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.031075954 CEST	64290	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.031124115 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.031208992 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.031248093 CEST	64289	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.031367064 CEST	64290	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.046838999 CEST	64286	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.046838999 CEST	64286	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.046868086 CEST	443	64286	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.046879053 CEST	443	64286	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.059516907 CEST	64289	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.059575081 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.072096109 CEST	64290	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.072132111 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.075529099 CEST	64291	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.075572968 CEST	443	64291	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.075819969 CEST	64291	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.075819969 CEST	64291	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.075851917 CEST	443	64291	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.079196930 CEST	443	64287	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.079210043 CEST	443	64287	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.079258919 CEST	443	64287	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.079334021 CEST	64287	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.079420090 CEST	64287	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.079884052 CEST	64287	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.079900980 CEST	443	64287	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.079948902 CEST	64287	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.079955101 CEST	443	64287	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.081717014 CEST	64292	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.081751108 CEST	443	64292	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.082182884 CEST	64292	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.082206964 CEST	64292	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.082212925 CEST	443	64292	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.680172920 CEST	443	64288	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.680814028 CEST	64288	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.680844069 CEST	443	64288	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.681736946 CEST	64288	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.681745052 CEST	443	64288	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.834580898 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.834686041 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.835177898 CEST	64290	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.835196972 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.835361958 CEST	64289	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.835418940 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.835961103 CEST	64290	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.835967064 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.836183071 CEST	443	64292	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.836246014 CEST	64289	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.836265087 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.836592913 CEST	64292	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.836607933 CEST	443	64292	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.837028027 CEST	64292	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.837033987 CEST	443	64292	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.839301109 CEST	443	64288	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.839361906 CEST	443	64288	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.839406013 CEST	64288	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.839533091 CEST	64288	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.839550018 CEST	443	64288	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.839564085 CEST	64288	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.839570999 CEST	443	64288	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.841598034 CEST	443	64291	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.841983080 CEST	64291	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.842000961 CEST	443	64291	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.842463017 CEST	64291	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.842478037 CEST	443	64291	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.843971014 CEST	64293	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.844047070 CEST	443	64293	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.844129086 CEST	64293	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.844353914 CEST	64293	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.844404936 CEST	443	64293	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.970396042 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.970463991 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.970518112 CEST	64290	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.970534086 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.970590115 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.970644951 CEST	64290	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.970793009 CEST	64290	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.970803022 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.970818996 CEST	64290	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.970824957 CEST	443	64290	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.972738028 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.972790003 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.972846031 CEST	64289	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.972882032 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.972920895 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.972997904 CEST	64289	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.972997904 CEST	64289	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.972997904 CEST	64289	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.973047972 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.974719048 CEST	64294	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.974750042 CEST	443	64294	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.974812031 CEST	64294	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.974973917 CEST	64294	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.974987030 CEST	443	64294	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.975445986 CEST	443	64292	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.975613117 CEST	443	64292	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.975663900 CEST	64292	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.975698948 CEST	64292	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.975708961 CEST	443	64292	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.975773096 CEST	64292	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.975778103 CEST	443	64292	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.975780964 CEST	64295	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.975872040 CEST	443	64295	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.975990057 CEST	64295	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.976305962 CEST	64295	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.976340055 CEST	443	64295	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.977922916 CEST	64296	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.977946043 CEST	443	64296	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.978033066 CEST	64296	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.978662014 CEST	64296	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.978679895 CEST	443	64296	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.980230093 CEST	443	64291	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.980254889 CEST	443	64291	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.980294943 CEST	443	64291	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.980323076 CEST	64291	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.980359077 CEST	64291	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.980545044 CEST	64291	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.980567932 CEST	443	64291	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.980593920 CEST	64291	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.980623007 CEST	443	64291	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.982924938 CEST	64297	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.982964993 CEST	443	64297	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:08.983026981 CEST	64297	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.983153105 CEST	64297	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:08.983170033 CEST	443	64297	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.176227093 CEST	64289	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.176286936 CEST	443	64289	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.594774961 CEST	443	64293	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.595277071 CEST	64293	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.595330000 CEST	443	64293	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.596024990 CEST	64293	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.596040010 CEST	443	64293	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.730695963 CEST	443	64293	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.730727911 CEST	443	64293	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.730789900 CEST	443	64293	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.731034040 CEST	64293	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.731034040 CEST	64293	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.731901884 CEST	64293	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.731930017 CEST	443	64293	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.733680010 CEST	64298	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.733719110 CEST	443	64298	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.733887911 CEST	64298	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.734006882 CEST	64298	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.734023094 CEST	443	64298	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.735544920 CEST	443	64294	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.736072063 CEST	64294	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.736087084 CEST	443	64294	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.736601114 CEST	64294	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.736605883 CEST	443	64294	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.740227938 CEST	443	64296	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.740930080 CEST	64296	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.740945101 CEST	443	64296	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.740974903 CEST	64296	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.740979910 CEST	443	64296	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.741386890 CEST	443	64295	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.741859913 CEST	64295	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.741883993 CEST	443	64295	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.742126942 CEST	64295	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.742134094 CEST	443	64295	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.778933048 CEST	443	64297	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.779506922 CEST	64297	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.779536009 CEST	443	64297	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.780179977 CEST	64297	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.780195951 CEST	443	64297	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.871408939 CEST	443	64294	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.871551991 CEST	443	64294	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.871680975 CEST	64294	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.871881008 CEST	64294	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.871897936 CEST	443	64294	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.871977091 CEST	64294	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.871983051 CEST	443	64294	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.874564886 CEST	64299	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.874604940 CEST	443	64299	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.874799013 CEST	64299	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.874902964 CEST	64299	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.874912024 CEST	443	64299	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.881469965 CEST	443	64295	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.881496906 CEST	443	64295	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.881555080 CEST	443	64295	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.881572962 CEST	64295	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.881717920 CEST	64295	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.881738901 CEST	64295	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.881738901 CEST	64295	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.881758928 CEST	443	64295	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.881773949 CEST	443	64295	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.884031057 CEST	64300	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.884071112 CEST	443	64300	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.884476900 CEST	64300	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.884476900 CEST	64300	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.884507895 CEST	443	64300	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.885337114 CEST	443	64296	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.885488033 CEST	443	64296	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.885694027 CEST	64296	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.885694027 CEST	64296	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.885751963 CEST	64296	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.885762930 CEST	443	64296	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.887463093 CEST	64301	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.887506008 CEST	443	64301	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.887837887 CEST	64301	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.887837887 CEST	64301	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.887876987 CEST	443	64301	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.917299032 CEST	443	64297	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.917323112 CEST	443	64297	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.917367935 CEST	443	64297	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.917404890 CEST	64297	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.917535067 CEST	64297	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.917535067 CEST	64297	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.917547941 CEST	443	64297	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.917579889 CEST	64297	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.917583942 CEST	443	64297	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.919375896 CEST	64302	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.919394016 CEST	443	64302	13.107.253.45	192.168.2.4
Oct 24, 2024 18:17:09.919557095 CEST	64302	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.919699907 CEST	64302	443	192.168.2.4	13.107.253.45
Oct 24, 2024 18:17:09.919711113 CEST	443	64302	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 18:15:47.032802105 CEST	53	64213	1.1.1.1	192.168.2.4
Oct 24, 2024 18:15:47.066159010 CEST	53	53886	1.1.1.1	192.168.2.4
Oct 24, 2024 18:15:48.758593082 CEST	55571	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:15:48.758820057 CEST	56632	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:15:49.372159004 CEST	53	53491	1.1.1.1	192.168.2.4
Oct 24, 2024 18:15:50.938833952 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 18:15:51.082648039 CEST	51581	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:15:51.082812071 CEST	57978	53	192.168.2.4	1.1.1.1
Oct 24, 2024 18:15:51.090223074 CEST	53	57978	1.1.1.1	192.168.2.4
Oct 24, 2024 18:15:51.090713978 CEST	53	51581	1.1.1.1	192.168.2.4
Oct 24, 2024 18:16:02.871812105 CEST	53	51950	1.1.1.1	192.168.2.4
Oct 24, 2024 18:16:05.565171957 CEST	53	59385	1.1.1.1	192.168.2.4
Oct 24, 2024 18:16:24.523578882 CEST	53	64953	1.1.1.1	192.168.2.4
Oct 24, 2024 18:16:46.634287119 CEST	53	58382	1.1.1.1	192.168.2.4
Oct 24, 2024 18:16:46.869482994 CEST	53	61495	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 18:15:48.758593082 CEST	192.168.2.4	1.1.1.1	0xc57e	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:15:48.758820057 CEST	192.168.2.4	1.1.1.1	0x403d	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false
Oct 24, 2024 18:15:51.082648039 CEST	192.168.2.4	1.1.1.1	0x439	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:15:51.082812071 CEST	192.168.2.4	1.1.1.1	0xb70c	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 18:15:49.372009039 CEST	1.1.1.1	192.168.2.4	0xc57e	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:15:49.390391111 CEST	1.1.1.1	192.168.2.4	0x403d	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:15:51.090223074 CEST	1.1.1.1	192.168.2.4	0xb70c	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 18:15:51.090713978 CEST	1.1.1.1	192.168.2.4	0x439	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:15:59.976116896 CEST	1.1.1.1	192.168.2.4	0xbc44	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:15:59.976116896 CEST	1.1.1.1	192.168.2.4	0xbc44	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:16:01.975522041 CEST	1.1.1.1	192.168.2.4	0xf359	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:16:01.975522041 CEST	1.1.1.1	192.168.2.4	0xf359	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:16:29.857738972 CEST	1.1.1.1	192.168.2.4	0xaa70	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:16:29.857738972 CEST	1.1.1.1	192.168.2.4	0xaa70	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:16:29.857738972 CEST	1.1.1.1	192.168.2.4	0xaa70	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 18:17:00.372056007 CEST	1.1.1.1	192.168.2.4	0x8f01	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 18:17:00.372056007 CEST	1.1.1.1	192.168.2.4	0x8f01	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 16:15:52 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=1740 Date: Thu, 24 Oct 2024 16:15:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:15:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 16:15:54 UTC	513	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=1825 Date: Thu, 24 Oct 2024 16:15:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 16:15:54 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:00 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=E3WYXKGBK8tSARs&MD=goLEUVsd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 16:16:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 66bd3764-18a9-46b5-acf1-a75c8277691d MS-RequestId: f3632c87-5772-478f-b309-fbe219613274 MS-CV: sx4OUCvnM0a5GejB.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 16:16:00 GMT Connection: close Content-Length: 24490
2024-10-24 16:16:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 16:16:01 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	64103	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:30 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:30 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:30 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161630Z-r1755647c66kv68zfmyfrbcqzg00000008c000000000c7pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:30 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 16:16:31 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 16:16:31 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 16:16:31 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 16:16:31 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 16:16:31 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 16:16:31 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 16:16:31 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 16:16:31 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 16:16:31 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	64106	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:33 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:33 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161633Z-r1755647c66zs9x4962sbyaz1w000000083g00000000abtw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:33 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	64107	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:33 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:33 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c4ab37c7-901e-002a-3417-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161633Z-17fbfdc98bblfj7gw4f18guu2800000000sg0000000052sq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 16:16:33 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	64105	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:33 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:33 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: c9882c23-801e-0078-0c63-1fbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161633Z-r1755647c66c9glmgg3prd89mn0000000a0g000000006fm0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:33 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	64104	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:33 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:33 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 77f74883-b01e-0001-1a50-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161633Z-17fbfdc98bb96dqv0e332dtg6000000007k00000000018py x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:33 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	64108	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:33 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:33 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161633Z-r1755647c66m4jttnz6nb8kzng00000008cg00000000aca1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:33 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	64110	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:33 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f6e64d82-401e-0029-2a5d-239b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161633Z-17fbfdc98bb75b2fuh11781a0n00000007dg0000000079dn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	64112	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:33 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a0191c6f-501e-0047-3c5d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161634Z-17fbfdc98bb9tt772yde9rhbm800000007d000000000b9zm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	64109	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:33 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161633Z-r1755647c66x46wg1q56tyyk68000000097g000000007han x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:34 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	64113	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:33 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:34 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6d910339-b01e-0021-6856-23cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161634Z-17fbfdc98bbpc9nz0r22pywp0800000007s0000000000yf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:34 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	64114	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:33 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:34 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: ad393351-301e-0099-6d59-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161634Z-17fbfdc98bbqc8zsbguzmabx6800000007dg000000006fsq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:34 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	64115	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:34 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: bac56044-101e-0079-505d-235913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161634Z-17fbfdc98bbpc9nz0r22pywp0800000007q00000000049hc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	64116	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:34 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161634Z-r1755647c66wjht63r8k9qqnrs00000008gg000000004zd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	64117	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:34 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: a48fb397-901e-008f-6356-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161634Z-17fbfdc98bblptj7fr9s141cpc00000007m0000000002mzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	64118	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:34 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a95f3241-e01e-0020-1c5d-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161634Z-17fbfdc98bbndwgn5b4pg7s8bs00000007fg000000005e4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	64119	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:34 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 48cb304a-401e-0064-7764-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161634Z-17fbfdc98bbgzrcvp7acfz2d3000000007ng0000000041e8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	64121	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:35 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 5e1d4904-301e-0020-1550-236299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161635Z-17fbfdc98bbwfg2nvhsr4h37pn00000007f000000000ak3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	64122	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:35 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:35 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: b1dca041-701e-0001-1ae2-20b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161635Z-r1755647c66zs9x4962sbyaz1w00000008600000000065pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:36 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	64124	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:35 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161635Z-17fbfdc98bb2fzn810kvcg2zng00000007q0000000004cne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:36 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	64120	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:35 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:35 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bb9292ef-d01e-00ad-5d35-21e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161635Z-r1755647c66cdf7jx43n17haqc0000000ar0000000009bbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:36 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	64123	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:35 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:35 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c39ac956-e01e-001f-465d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161635Z-17fbfdc98bbl89flqtm21qm6rn00000007m00000000088gp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	64127	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:36 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:36 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b93710ac-501e-007b-525a-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161636Z-17fbfdc98bbg2mc9qrpn009kgs00000007mg0000000083dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:36 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	64126	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:36 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161636Z-17fbfdc98bbczcjda6v8hpct4c0000000170000000005xsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	64125	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:36 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161636Z-r1755647c66pzcrw3ktqe96x2s00000000fg000000003rbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 16:16:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	64128	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:36 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6949b098-b01e-0084-1a35-21d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161636Z-r1755647c66x7vzx9armv8e3cw00000000ug00000000c85k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	64129	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:36 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:36 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161636Z-17fbfdc98bbh7l5skzh3rekksc00000000mg00000000a3ab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:36 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	64131	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:37 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161637Z-r1755647c66lljn2k9s29ch9ts00000009zg000000008fem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	64130	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:37 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:37 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161637Z-r1755647c66vrwbmeqw88hpesn00000009q0000000009nab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:37 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	64132	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:37 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:37 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161637Z-17fbfdc98bbkw9phumvsc7yy8w00000007gg000000006k54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:37 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	64133	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:37 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 55f0b2c4-501e-008f-5c50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161637Z-17fbfdc98bb2fzn810kvcg2zng00000007h000000000b7zn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	64134	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:37 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:38 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: c04d3aa5-c01e-002b-4b56-236e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161638Z-17fbfdc98bbrx2rj4asdpg8sbs00000003dg000000008vuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:38 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	64136	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:38 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161638Z-r1755647c66wjht63r8k9qqnrs00000008fg000000006s57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	64135	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:38 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:38 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9e0e1983-701e-003e-2856-2379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161638Z-r1755647c66fnxpdavnqahfp1w000000084g000000009u7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:38 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	64137	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:38 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 064568ba-501e-008c-7d65-23cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161638Z-17fbfdc98bbvcvlzx1n0fduhm000000007n00000000076hv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	64138	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:38 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 5cd52618-301e-0033-5865-23fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161638Z-17fbfdc98bbcrtjhdvnfuyp28800000007mg0000000090v7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	64139	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:38 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:38 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 81ed7e34-d01e-008e-11ae-25387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161638Z-17fbfdc98bbwj6cp6df5812g4s00000000v0000000005n2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:39 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	64142	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:39 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161639Z-17fbfdc98bb6j78ntkx6e2fx4c00000007f0000000005wn0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	64141	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:39 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 95a4abee-901e-0016-6e50-23efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161639Z-17fbfdc98bbvwcxrk0yzwg4d5800000007mg000000005uz2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:39 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	64140	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:39 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:39 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: ad3e5457-301e-0099-155a-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161639Z-17fbfdc98bbkw9phumvsc7yy8w00000007mg000000001x3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:39 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	64143	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:39 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:39 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161639Z-r1755647c66m4jttnz6nb8kzng00000008eg000000007kvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:39 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	64144	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:39 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:39 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 0c1e413e-701e-0021-5e50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161639Z-17fbfdc98bb96dqv0e332dtg6000000007dg000000008b18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:39 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	64145	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:40 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:40 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62ae5dc2-001e-0079-2456-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161640Z-17fbfdc98bb94gkbvedtsa5ef400000007eg00000000bwfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:40 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	64147	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:40 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:40 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0c1e418e-701e-0021-2a50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161640Z-17fbfdc98bbngfjxtncsq24exs0000000100000000006713 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:40 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	64146	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:40 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:40 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1bb7fc0c-c01e-0046-7759-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161640Z-17fbfdc98bbvcvlzx1n0fduhm000000007q000000000594x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:40 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	64149	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:40 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:40 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b6b4fe6b-401e-008c-805d-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161640Z-17fbfdc98bbgzrcvp7acfz2d3000000007g000000000amvz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:40 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	64150	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:40 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:40 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 8d905448-c01e-0079-0365-23e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161640Z-17fbfdc98bbnpjstwqrbe0re7n00000007c000000000cdxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:40 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	64148	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:40 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=E3WYXKGBK8tSARs&MD=goLEUVsd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 16:16:41 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 7b7bbda4-f1b3-4c01-8c08-f98a8a0ef6a1 MS-RequestId: beb94f5f-7df0-49e0-a3d7-b8d32a67e665 MS-CV: pephwE84MUKPyrP7.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 16:16:40 GMT Connection: close Content-Length: 30005
2024-10-24 16:16:41 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-24 16:16:41 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	64151	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:41 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:41 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:41 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f6bed088-301e-0000-1a9a-24eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161641Z-17fbfdc98bbwj6cp6df5812g4s00000000ug000000006z4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 16:16:41 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	64152	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:41 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:41 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161641Z-r1755647c66zs9x4962sbyaz1w0000000890000000000m33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:41 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	64153	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:41 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:41 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 629c9caa-001e-0079-2150-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161641Z-17fbfdc98bbczcjda6v8hpct4c00000001600000000070kq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:41 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	64154	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:41 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94247a1c-101e-0079-199a-245913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161641Z-17fbfdc98bbczcjda6v8hpct4c00000001500000000098mz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	64155	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:41 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:41 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161641Z-r1755647c66n5bjpba5s4mu9d000000009z0000000007u4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:41 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	64156	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:42 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b6a35dc4-401e-008c-3156-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161642Z-17fbfdc98bb9tt772yde9rhbm800000007gg000000006gr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	64158	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:42 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:42 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161642Z-17fbfdc98bbgqz661ufkm7k13c00000007bg00000000b707 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:42 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	64157	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:42 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161642Z-r1755647c66zs9x4962sbyaz1w00000008600000000065v3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	64159	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:42 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:42 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161642Z-r1755647c66dj7986akr8tvaw4000000095g00000000auda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	64160	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:42 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 0f4ad09c-101e-007a-25db-20047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161642Z-r1755647c66c9glmgg3prd89mn0000000a3g000000000e9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	64161	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:43 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:43 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: f58edff3-b01e-0002-5659-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161643Z-17fbfdc98bbn5xh71qanksxprn00000007hg00000000bcac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:43 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	64162	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:43 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:43 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 44b67bbb-401e-0067-2250-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161643Z-17fbfdc98bbgqz661ufkm7k13c00000007e0000000007cb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:43 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	64163	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:43 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:43 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161643Z-17fbfdc98bbp4fvlbnh222662800000000kg000000003m0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:43 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	64165	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:43 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:43 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a363c0e5-301e-003f-5298-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161643Z-r1755647c66x7vzx9armv8e3cw0000000110000000001c0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:43 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	64164	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:43 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:43 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:43 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161643Z-r1755647c66fnxpdavnqahfp1w0000000850000000009gx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:43 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	64166	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:44 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1b5e4d83-b01e-0098-7ae3-20cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161644Z-r1755647c66sn7s9kfw6gzvyp000000009zg000000008c2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	64167	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:44 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161644Z-17fbfdc98bbg2mc9qrpn009kgs00000007qg0000000048yv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	64168	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:44 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:44 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ae9ee863-001e-000b-78d3-2015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161644Z-r1755647c66mgrw7zd8m1pn55000000008fg000000006rf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:44 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	64169	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:44 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:44 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: df53dfe1-801e-0067-2856-23fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161644Z-17fbfdc98bbkw9phumvsc7yy8w00000007eg000000009f7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:44 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	64170	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:44 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:44 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161644Z-r1755647c66nxct5p0gnwngmx0000000098g00000000606h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:44 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	64172	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:45 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:45 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161645Z-17fbfdc98bb2fzn810kvcg2zng00000007pg000000006kz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:45 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	64173	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:45 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:45 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161645Z-17fbfdc98bbnpjstwqrbe0re7n00000007bg00000000bp65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:45 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	64174	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:45 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161645Z-17fbfdc98bbwfg2nvhsr4h37pn00000007hg0000000082ye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:45 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	64175	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:45 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:45 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: fc76b70a-c01e-0034-0bf8-202af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161645Z-r1755647c66l72xfkr6ug378ks00000008t000000000at8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:45 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	64171	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:45 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:45 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161645Z-r1755647c66nfj7t97c2qyh6zg00000006u00000000082r1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	64176	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:45 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 5871072e-001e-0034-4bb0-20dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161646Z-r1755647c66ldfgxa3qp9d53us00000009wg00000000bw7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	64177	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:46 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 610ea227-401e-00ac-206b-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161646Z-17fbfdc98bbvcvlzx1n0fduhm000000007qg000000003zhf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	64179	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:46 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161646Z-r1755647c66tmf6g4720xfpwpn0000000asg000000006nyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	64180	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:46 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:46 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161646Z-r1755647c66n5bjpba5s4mu9d00000000a10000000005qcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:46 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	64178	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:46 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:46 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7699e86-701e-0050-405d-236767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161646Z-17fbfdc98bb75b2fuh11781a0n00000007e0000000006x2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:46 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	64181	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:46 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:46 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 26247a46-101e-000b-3298-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161646Z-r1755647c66xrxq4nv7upygh4s00000003fg000000006yxz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:47 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	64182	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:46 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:46 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: fd7883f4-d01e-0017-7959-23b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161646Z-r1755647c66cdf7jx43n17haqc0000000an000000000ccsp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:47 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	64183	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:47 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:47 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161647Z-r1755647c66z4pt7cv1pnqayy400000009xg00000000b9vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:47 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	64184	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:47 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:47 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161647Z-r1755647c66n5bjpba5s4mu9d000000009y000000000a5v0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:47 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	64185	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:47 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:47 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 47efb004-101e-0017-69d3-2047c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161647Z-r1755647c66fnxpdavnqahfp1w000000088g0000000041av x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:47 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	64188	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:47 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:47 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5a8d2ac8-001e-0034-336b-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161647Z-17fbfdc98bbrx2rj4asdpg8sbs00000003kg000000001b4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:47 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	64189	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:48 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:48 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 46032cb8-c01e-007a-5b59-23b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161648Z-17fbfdc98bbnpjstwqrbe0re7n00000007eg000000007a8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:48 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	64190	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:48 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:48 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 514e14b5-c01e-0014-51c9-20a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161648Z-r1755647c66tmf6g4720xfpwpn0000000arg000000008bqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:48 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	64191	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:48 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:48 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:48 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: c39a1591-e01e-001f-5e5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161648Z-17fbfdc98bblfj7gw4f18guu2800000000sg00000000532e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:48 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	64192	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:48 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:48 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161648Z-r1755647c66c9glmgg3prd89mn0000000a3g000000000ekx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:48 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	64193	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:49 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:49 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 37f3233a-001e-0082-4c59-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161649Z-17fbfdc98bbnhb2b0umpa641c800000007d00000000090ug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	64195	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:49 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:49 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161649Z-17fbfdc98bbnhb2b0umpa641c800000007e00000000080uk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	64194	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:49 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:49 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 44b73ccb-201e-0096-2a5d-23ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161649Z-r1755647c66f4bf880huw27dwc00000000n00000000086k0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:49 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	64196	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:49 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:49 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161649Z-r1755647c66gb86l6k27ha2m1c00000008bg00000000d1zt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:49 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	64198	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:50 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:50 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: e3d367a8-d01e-0028-7850-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161650Z-17fbfdc98bb8xnvm6t4x6ec5m400000007b0000000008mbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:50 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	64197	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:50 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:50 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c39afafb-e01e-001f-695d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161650Z-17fbfdc98bbn5xh71qanksxprn00000007qg000000003mbk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:50 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	64199	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:50 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:50 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: facc6f57-201e-006e-7356-23bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161650Z-17fbfdc98bbvf2fnx6t6w0g25n00000007h0000000008y0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:50 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	64187	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:50 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:50 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: aaa69ab3-801e-0047-5050-237265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161650Z-17fbfdc98bbvf2fnx6t6w0g25n00000007n0000000004cbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:50 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	64200	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:50 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:50 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 47e88f44-301e-001f-2592-1faa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161650Z-r1755647c66cdf7jx43n17haqc0000000aqg000000009d2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	64201	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:51 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:51 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 28cefb6f-601e-003d-6a50-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161651Z-17fbfdc98bbngfjxtncsq24exs00000000zg000000007mrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:51 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	64204	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:51 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:51 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:51 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 33f58e49-701e-0053-6bb3-203a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161651Z-r1755647c66xkk8sn093pbsnz8000000013000000000610p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:51 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	64203	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:51 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:51 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: d2e4573f-901e-0067-4de3-20b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161651Z-r1755647c66kv68zfmyfrbcqzg00000008fg000000006xa5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:51 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	64202	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:51 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:51 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:51 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161651Z-r1755647c66hbclz9tgqkaxg2w00000000u0000000008te7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:51 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	64205	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:52 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 2ea30268-a01e-006f-2759-2313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161652Z-17fbfdc98bbndwgn5b4pg7s8bs00000007eg000000006yhc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	64207	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:52 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:52 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161652Z-r1755647c66j878m0wkraqty3800000008kg000000001430 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:52 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	64208	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:52 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:52 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 0f0ed433-b01e-0053-635d-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161652Z-17fbfdc98bbndwgn5b4pg7s8bs00000007fg000000005epa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:52 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	64209	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:52 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:52 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161652Z-r1755647c66z4pt7cv1pnqayy40000000a2g000000002enp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:52 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	64210	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:52 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:52 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: d904b25e-d01e-0066-3f59-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161652Z-17fbfdc98bblvnlh5w88rcarag00000007m0000000008wdg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:52 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	64211	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:52 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:52 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161652Z-r1755647c66nfj7t97c2qyh6zg00000006w000000000536r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:53 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	64214	13.107.253.45	443	3624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:53 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:53 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6142a1d8-401e-0064-7992-1f54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161653Z-r1755647c66ldfgxa3qp9d53us00000009zg0000000087tp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:53 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	64213	13.107.253.45	443	4476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:53 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:53 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161653Z-17fbfdc98bbcrtjhdvnfuyp28800000007hg00000000b4ev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:53 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	64212	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:53 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:53 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 3ed3a1a2-201e-0085-145a-2334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161653Z-17fbfdc98bb4k5z6ayu7yh2rsn00000007q0000000000u6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:53 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	64215	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:53 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:53 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161653Z-r1755647c66fnxpdavnqahfp1w000000086g0000000074b0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	64217	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:54 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161654Z-17fbfdc98bb7qlzm4x52d2225c00000007e0000000009wh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	64218	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:54 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:54 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161654Z-r1755647c66mgrw7zd8m1pn55000000008h0000000004gmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	64216	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:54 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:54 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161654Z-r1755647c66x46wg1q56tyyk6800000009a0000000002ts6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	64220	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:54 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:54 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b71c6767-a01e-0021-3a5a-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161654Z-17fbfdc98bb6j78ntkx6e2fx4c00000007eg000000007g3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	64219	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:54 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:54 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161654Z-17fbfdc98bbl89flqtm21qm6rn00000007p000000000537z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	64224	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:55 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:55 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 2e9d796b-b01e-00ab-5859-23dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161655Z-17fbfdc98bbwj6cp6df5812g4s00000000wg000000002ns4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	64223	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:55 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 55805c6b-301e-0052-57c0-2065d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161655Z-r1755647c66cdf7jx43n17haqc0000000atg000000004brt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	64222	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:55 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:55 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: b1cc7e4f-b01e-001e-6956-230214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161655Z-17fbfdc98bbvf2fnx6t6w0g25n00000007eg00000000ccup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	64221	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:55 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:55 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: fc8879c6-e01e-003c-6a59-23c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161655Z-17fbfdc98bbqc8zsbguzmabx6800000007d000000000824y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	64225	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:55 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b72677c2-a01e-0021-325d-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161655Z-17fbfdc98bbczcjda6v8hpct4c000000014g0000000095hm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	64226	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:56 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 28e56280-601e-003d-4259-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161656Z-17fbfdc98bblptj7fr9s141cpc00000007mg0000000024yr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	64229	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:56 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:56 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161656Z-r1755647c66m4jttnz6nb8kzng00000008bg00000000c7tz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:56 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	64227	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:56 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:56 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:56 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 23449c74-401e-0083-0a50-23075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161656Z-17fbfdc98bbvvplhck7mbap4bw00000001100000000019fv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:56 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	64228	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:56 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:56 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161656Z-r1755647c66k9st9tvd58z9dg80000000a1g000000004ky8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:57 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	64230	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:57 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:57 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0b335c04-001e-0049-76aa-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161657Z-17fbfdc98bbcrtjhdvnfuyp28800000007hg00000000b4mw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:57 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	64231	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:57 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:57 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 7d169aa3-d01e-0017-7930-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161657Z-r1755647c66vrwbmeqw88hpesn00000009sg000000005b7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:57 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	64232	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:57 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:57 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161657Z-17fbfdc98bbndwgn5b4pg7s8bs00000007eg000000006yqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:57 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	64233	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:57 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:57 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: fa7d2ad1-701e-0098-7450-23395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161657Z-17fbfdc98bbwfg2nvhsr4h37pn00000007eg00000000c8n9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:57 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	64234	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:57 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:57 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:57 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 26312148-601e-003e-327a-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161657Z-17fbfdc98bbwfg2nvhsr4h37pn00000007f000000000akr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:57 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	64235	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:58 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:58 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161658Z-r1755647c66kv68zfmyfrbcqzg00000008eg0000000087nf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:58 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	64236	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:58 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:58 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 80b3223a-a01e-0002-4456-235074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161658Z-17fbfdc98bbwfg2nvhsr4h37pn00000007p0000000002h3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:58 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	64237	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:58 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:58 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161658Z-r1755647c669hnl7dkxy835cqc00000007r0000000008ua8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:58 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	64238	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:58 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:58 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: f7b99165-401e-0035-1ce4-2582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161658Z-17fbfdc98bbwj6cp6df5812g4s00000000sg000000008mxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:58 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	64239	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:58 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:58 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:58 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 563c5de3-c01e-0034-155d-232af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161658Z-17fbfdc98bbgqz661ufkm7k13c00000007eg000000006usv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:58 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	64240	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:59 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:59 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c25cd208-b01e-0070-595d-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161659Z-17fbfdc98bbn5xh71qanksxprn00000007r0000000002v4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:59 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	64242	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:59 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:59 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 9e5c5f24-f01e-001f-3156-235dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161659Z-17fbfdc98bbq2x5bzrteug30v800000007n0000000000ufs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:59 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	64243	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:59 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:59 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 35e941fb-301e-005d-58de-21e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161659Z-r1755647c66f2zlraraf0y5hrs00000008gg000000005ps0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:59 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	64244	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:16:59 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:16:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:16:59 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 1bb821d9-c01e-0046-5959-232db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161659Z-17fbfdc98bb6j78ntkx6e2fx4c00000007cg000000009zn1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:16:59 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	64246	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:17:00 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:17:00 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:17:00 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 77170aa2-001e-0049-0450-235bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161700Z-17fbfdc98bbgzrcvp7acfz2d3000000007g000000000anft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:17:00 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	64247	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:17:00 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:17:00 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:17:00 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 7e8f74bf-e01e-000c-3628-218e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161700Z-r1755647c66kv68zfmyfrbcqzg00000008k0000000002505 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:17:00 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	64241	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:17:00 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:17:00 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:17:00 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: d9c148d9-d01e-00ad-325d-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161700Z-17fbfdc98bbvvplhck7mbap4bw00000000x0000000007n3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:17:00 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	64248	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:17:00 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:17:00 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:17:00 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 94b404e1-401e-0047-3e0b-228597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161700Z-r1755647c66nfj7t97c2qyh6zg00000006r000000000b792 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:17:00 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	64245	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:17:01 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:17:01 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:17:01 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161701Z-r1755647c66vrwbmeqw88hpesn00000009pg000000009z8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:17:01 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	64249	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:17:01 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:17:01 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:17:01 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 08f72666-401e-0015-30d8-210e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161701Z-r1755647c66x7vzx9armv8e3cw00000000x0000000009s17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:17:01 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	64250	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:17:01 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:17:01 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:17:01 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 51b44b3a-601e-0097-5627-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161701Z-r1755647c66n5bjpba5s4mu9d00000000a30000000001a1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:17:01 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	64251	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:17:01 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:17:01 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:17:01 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 5949faeb-401e-0048-7bdb-200409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161701Z-r1755647c66x46wg1q56tyyk68000000095g00000000agux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:17:01 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	64252	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 16:17:01 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 16:17:01 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 16:17:01 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: b9c8d577-601e-0002-7dab-21a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T161701Z-r1755647c66dj7986akr8tvaw4000000094g00000000bpxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 16:17:01 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3624, Parent PID: 2120

General

Target ID:	0
Start time:	12:15:40
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4476, Parent PID: 3624

General

Target ID:	2
Start time:	12:15:45
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2028,i,9909528904355472854,4827053517861882051,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6272, Parent PID: 2120

General

Target ID:	3
Start time:	12:15:47
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3624, Parent PID: 2120

General

Chronological Activities

Analysis Process: chrome.exePID: 4476, Parent PID: 3624

General

Chronological Activities

Analysis Process: chrome.exePID: 6272, Parent PID: 2120

General

Chronological Activities

Disassembly

Windows Analysis Report
https://docucdn-a.akamaihd.net/olive/images/2.62.0/global-assets/email-templates/email-logo.png